Sql injection

2023-04-1713:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

wordpress

gallery plugin

blind sql

nvd

security

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor’s Slider plugin (https://wordpress.org/plugins/slider-bws/) must also be installed for this vulnerability to be exploitable.