Количество 3
Количество 3
CVE-2024-2879
The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
GHSA-53x2-fcg3-m32m
The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
BDU:2024-03376
Уязвимость функции ls_get_popup_markup() сценария assets/wp/actions.php плагина LayerSlider системы управления содержимым сайта WordPress, позволяющая нарушителю выполнять произвольные SQL-запросы
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-2879 The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. | CVSS3: 9.8 | 94% Критический | почти 2 года назад |
| GHSA-53x2-fcg3-m32m The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. | CVSS3: 9.8 | 94% Критический | почти 2 года назад |
 | BDU:2024-03376 Уязвимость функции ls_get_popup_markup() сценария assets/wp/actions.php плагина LayerSlider системы управления содержимым сайта WordPress, позволяющая нарушителю выполнять произвольные SQL-запросы | CVSS3: 9.8 | 94% Критический | почти 2 года назад |
Уязвимостей на страницу