8.5 High

CVE-2025-31926 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Sticky Radio Player lbg-audio5-html5-shoutcast_sticky allows SQL Injection.This issue affects Sticky Radio Player: from n/a through <= 3.4.

Affected products and versions

Product	Affected versions	Fixed in
Sticky Radio Player 3.4	earliest → 3.4	No fix stated

The 2 CVEs of Sticky Radio Player →

CVE-2025-31426 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup… 7.1 High

Do you use Sticky Radio Player?

Track this CVE Watch Sticky Radio Player Check my SBOMs

www.cveye.io/en/cve/CVE-2025-31926

Timeline

Published May 16, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-31926 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup…

Description

Affected products and versions

Other CVEs of Sticky Radio Player