Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Image&Video FullScreen Background lbg_fullscreen_fullwidth_slider allows SQL Injection.This issue affects Image&Video FullScreen Background: from n/a through <= 1.6.7.
Problem types
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Product status
Any version
Credits
João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
References
vdp.patchstack.com/...-sql-injection-vulnerability?_s_id=cve