Description (CNA)
Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Angry Byte / wordpress-gallery-transformation | affected unspecified before 1.0 |
CWE
No CWE identifiers supplied.
References
- https://wpvulndb.com/vulnerabilities/8888
- http://www.vapidlabs.com/advisory.php?v=199
- https://wordpress.org/plugins/wordpress-gallery-transformation/
ADP enrichment
No English description supplied.