Vulnerabilities > CVE-2021-24506 - Unspecified vulnerability in Quantumcloud Slider Hero

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

quantumcloud

NVD

Published: 2021-08-23

Updated: 2024-11-21

Summary

The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin before 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using it in a SQL statement, allowing users with a role as low as Contributor to perform SQL injection.

Vulnerable Configurations

Part	Description	Count
Application	Quantumcloud Quantumcloud Slider Hero - Quantumcloud Slider Hero 0.9.0 Quantumcloud Slider Hero 0.9.1 Quantumcloud Slider Hero 0.9.5 Quantumcloud Slider Hero 1.0.0 Quantumcloud Slider Hero 1.1.0 Quantumcloud Slider Hero 1.2.0 Quantumcloud Slider Hero 1.4.0 Quantumcloud Slider Hero 1.4.5 Quantumcloud Slider Hero 1.5.0 Quantumcloud Slider Hero 1.5.5 Quantumcloud Slider Hero 1.6.0 Quantumcloud Slider Hero 1.6.5 Quantumcloud Slider Hero 1.7.0 Quantumcloud Slider Hero 1.7.5 Quantumcloud Slider Hero 1.8.0 Quantumcloud Slider Hero 1.9.0 Quantumcloud Slider Hero 1.9.1 Quantumcloud Slider Hero 2.0.0 Quantumcloud Slider Hero 2.1.0 Quantumcloud Slider Hero 2.1.5 Quantumcloud Slider Hero 2.2.0 Quantumcloud Slider Hero 2.3.0 Quantumcloud Slider Hero 2.4.0 Quantumcloud Slider Hero 2.5.0 Quantumcloud Slider Hero 2.6.0 Quantumcloud Slider Hero 2.7.0 Quantumcloud Slider Hero 2.8.0 Quantumcloud Slider Hero 2.9.0 Quantumcloud Slider Hero 3.0.0 Quantumcloud Slider Hero 3.1.0 Quantumcloud Slider Hero 3.2.0 Quantumcloud Slider Hero 3.3.0 Quantumcloud Slider Hero 3.4.0 Quantumcloud Slider Hero 3.5.0 Quantumcloud Slider Hero 3.6.0 Quantumcloud Slider Hero 3.7.0 Quantumcloud Slider Hero 3.8.0 Quantumcloud Slider Hero 3.9.0 Quantumcloud Slider Hero 4.0.0 Quantumcloud Slider Hero 4.1.0 Quantumcloud Slider Hero 4.2.0 Quantumcloud Slider Hero 4.3.0 Quantumcloud Slider Hero 4.4.0 Quantumcloud Slider Hero 4.5.0 Quantumcloud Slider Hero 4.6.0 Quantumcloud Slider Hero 4.7.0 Quantumcloud Slider Hero 4.8.0 Quantumcloud Slider Hero 4.9.0 Quantumcloud Slider Hero 5.0.0 Quantumcloud Slider Hero 5.1.0 Quantumcloud Slider Hero 5.2.0 Quantumcloud Slider Hero 5.3.0 Quantumcloud Slider Hero 5.4.0 Quantumcloud Slider Hero 5.5.0 Quantumcloud Slider Hero 5.6.0 Quantumcloud Slider Hero 5.7.0 Quantumcloud Slider Hero 5.8.0 Quantumcloud Slider Hero 5.9.0 Quantumcloud Slider Hero 6.0.0 Quantumcloud Slider Hero 6.1.0 Quantumcloud Slider Hero 6.3.0 Quantumcloud Slider Hero 6.4.0 Quantumcloud Slider Hero 6.5.0 Quantumcloud Slider Hero 6.6.0 Quantumcloud Slider Hero 6.7.0 Quantumcloud Slider Hero 6.8.0 Quantumcloud Slider Hero 6.9.0 Quantumcloud Slider Hero 7.0.0 Quantumcloud Slider Hero 7.1.0 Quantumcloud Slider Hero 7.2.0 Quantumcloud Slider Hero 7.3.0 Quantumcloud Slider Hero 7.4.0 Quantumcloud Slider Hero 7.5.0 Quantumcloud Slider Hero 7.5.1 Quantumcloud Slider Hero 7.5.2 Quantumcloud Slider Hero 7.5.3 Quantumcloud Slider Hero 7.5.4 Quantumcloud Slider Hero 8.0.0 Quantumcloud Slider Hero 8.1.0 Quantumcloud Slider Hero 8.1.1 Quantumcloud Slider Hero 8.1.2 Quantumcloud Slider Hero 8.1.3 Quantumcloud Slider Hero 8.1.4 Quantumcloud Slider Hero 8.1.5 Quantumcloud Slider Hero 8.1.6 Quantumcloud Slider Hero 8.1.7 Quantumcloud Slider Hero 8.1.8 Quantumcloud Slider Hero 8.1.9 Quantumcloud Slider Hero 8.2.0 Quantumcloud Slider Hero 8.2.1 Quantumcloud Slider Hero 8.2.2 Quantumcloud Slider Hero 8.2.3 Quantumcloud Slider Hero 8.2.4 Quantumcloud Slider Hero 8.2.5 Quantumcloud Slider Hero 8.2.6	96

Summary

Vulnerable Configurations

References