CVE-2021-24398 Responsive 3D Slider <= 1.2 - Authenticated SQL Injection

The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is...

CVE-2021-24398

CVE-2021-24398 affects the WordPress plugin “Responsive 3D Slider” (plugins in the Morpheus Slider family) up to version 1.2. The vulnerability is an authenticated SQL injection in the Add new scene function where an id parameter is directly inserted into an SQL statement without sanitisation, es...