Dbox 3D Slider Lite <= 1.2.2 - SQL Injection
highThe Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).
- CVSS:
- 8.8
- Affected:
- up to 1.2.2
- Fixed in:
- 1.2.3
- Disclosed:
- Jan 11, 2018