CVE-2022-1687

CVE-2022-1687: Logo Slider <= 1.4.8 - Admin+ SQLi

Vendor Unknown

Product Logo Slider

Weakness CWE-89 · SQLi

Published June 6, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lsp_slider_id parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection

Key dates

02Disclosure timeline

June 6, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1687 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2023-26003 WordPress WP Post Corrector <= 1.0.2 - SQL Injection Vulnerability CVE-2018-25401 The Open ISES Project 3.30A SQL Injection via sever_graph.php CVE-2023-4441 SourceCodester Free Hospital Management System for Small Practices appointment.php sql injection CVE-2026-2620 Huace Monitoring and Early Warning System ProjectRole.aspx sql injection CVE-2025-46248 WordPress Frontend Dashboard plugin <= 2.2.5 - SQL Injection Vulnerability