CVE-2022-1687

The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lspsliderid parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection...

PT-2022-14045

Name of the Vulnerable Software and Affected Versions Logo Slider WordPress plugin versions 1.4.8 and earlier Description The issue concerns an SQL Injection problem. It occurs because the lsp slider id parameter is not properly sanitised and escaped before being used in a SQL statement via the...