CVE-2021-24557

The update functionality in the rsliderpage uses an rsid POST parameter which is not validated, sanitised or escaped before being inserted in sql query, therefore leading to SQL injection for users having Administrator role...

PT-2021-16077

Name of the Vulnerable Software and Affected Versions rslider page affected versions not specified Description The issue concerns the update functionality in the rslider page, which uses an rs id POST parameter. This parameter is not validated, sanitised, or escaped before being inserted into an...