8.5
High
CVE-2025-32290 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Sticky HTML5 Music Player lbg-audio3-html5 allows SQL Injection.This issue affects Sticky HTML5 Music Player: from n/a through <= 3.1.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sticky HTML5 Music Player 3.1 | earliest → 3.1.6 | No fix stated |