CVE-2022-1692

The CVE-2022-1692 issue affects the WordPress plugin CP Image Store with Slideshow prior to 1.0.68. The vulnerability arises from failing to sanitize and escape the ordering_by query parameter before it is used in a SQL statement on pages embedding [codepeople-image-store], enabling unauthenticat...