| Package | Affected versions | Patched versions |
|---|---|---|
| m-vslider | ≤ 2.1.3 |
The update functionality in the rslider_page uses an rs_id POST parameter which is not validated, sanitised or escaped before being inserted in sql query, therefore leading to SQL injection for users having Administrator role.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free