8.5 High

CVE-2025-32307 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Chameleon HTML5 Audio Player With/Without Playlist lbg-audio1-html5 allows SQL Injection.This issue affects Chameleon HTML5 Audio Player With/Without Playlist: from n/a through <= 3.5.6.

Affected products and versions

Product	Affected versions	Fixed in
Chameleon HTML5 Audio Player With/Without Playlist 3.5	earliest → 3.5.6	No fix stated

Do you use Chameleon HTML5 Audio Player With/Without Playlist?

Track this CVE Watch Chameleon HTML5 Audio Player With/Without Playlist Check my SBOMs

www.cveye.io/en/cve/CVE-2025-32307

Timeline

Published May 16, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE