CVE-2017-1002012

CVE-2017-1002012 : Vulnerability in the WordPress plugin image-gallery-with-slideshow (version 1.5.2) where admin_setting.php does not sanitize the gid input before including it in an SQL statement, enabling SQL injection. Multiple sources (NVD and Red Hat CVE pages, CNVD) describe this vulnerabi...

CVE-2017-1002012

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/adminsetting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement...