7.6
High
CVE-2025-47567 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player & FullScreen Video Background universal-video-player-and-bg allows Blind SQL Injection.This issue affects Video Player & FullScreen Video Background: from n/a through <= 2.4.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Video Player & FullScreen Video Background 2.4 | earliest → 2.4.1 | No fix stated |