CVE-2022-1684 Cube Slider <= 1.2 - Admin+ SQLi

2022-06-0608:51:17

CWE-89

WPScan

www.cve.org

4.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.9%

JSON

The Cube Slider WordPress plugin through 1.2 does not sanitise and escape the idslider parameter before using it in various SQL queries, leading to SQL Injections exploitable by high privileged users such as admin

CNA Affected

[
  {
    "product": "CUBE SLIDER",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.2",
        "status": "affected",
        "version": "1.2",
        "versionType": "custom"
      }
    ]
  }
]