Not rated
CVE-2022-1687 The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lsp_slider_id parameter before using…
Description
The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lsp_slider_id parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Logo Slider | 1.4.8 | No fix stated |
Other CVEs of Logo Slider
The 10 CVEs of Logo Slider →
CVE-2025-13153
The Logo Slider WordPress plugin before 4.9.0 does not validate and escape some of its slider options before outputting…
6.1
Medium
CVE-2024-9233
The Logo Slider WordPress plugin before 3.7.1 does not have CSRF check in place when updating its settings, which could…
4.3
Medium
CVE-2024-12308
The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before…
5.4
Medium
CVE-2024-10896
The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings,…
5.4
Medium