← Back

Nimble3

nimble3

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
M Vslider
m-vslider
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24557
1Nimble3
1M Vslider
Jun 17, 2026
Aug 23, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The update functionality in the rslider_page uses an rs_id POST parameter which is not validated, sanitised or escaped before being inserted in sql query, therefore leading to SQL injection for users having Administrator...Show more
The update functionality in the rslider_page uses an rs_id POST parameter which is not validated, sanitised or escaped before being inserted in sql query, therefore leading to SQL injection for users having Administrator role.Show less