CVE-2017-1002014

The CVE-2017-1002014 entry concerns the WordPress plugin image-gallery-with-slideshow (version 1.5.2). A SQL injection exists in admin_setting.php via the gallery_name parameter, enabling arbitrary SQL execution. The vulnerability is documented as Blind SQL Injection, with effects described in so...