by Kastro
Paper/Archive/CVE-2024-2879

CVE-2024-2879

LayerSlider LayerSlider — The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due…

EPSS 18%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 97.2.972 × 2019.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The LayerSlider plugin for WordPress is vulnerable to SQL Injection via the ls_get_popup_markup action in versions 7.9.11 and 7.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

Affected

ProductAffectedFixed inSource
LayerSlider7.9.11 – 7.10.0–CNA
layerslider7.9.11 – < 7.9.127.9.12CISA-ADP
layerslider7.10.0 – < 7.10.17.10.1CISA-ADP

Scores by source

Wordfence (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refwordfence.com/threat-intel/vulnerabilities/id/3fddf96e-029c-4753-ba82-043ca64b78d3?source=cvereflayerslider.com/release-log