High severity7.2NVD Advisory· Published Aug 23, 2021· Updated Jun 17, 2026
CVE-2021-24557
CVE-2021-24557
Description
The update functionality in the rslider_page uses an rs_id POST parameter which is not validated, sanitised or escaped before being inserted in sql query, therefore leading to SQL injection for users having Administrator role.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- rslider_page/rslider_pagedescription
Patches
Vulnerability mechanics
References
2- codevigilant.com/disclosure/2021/wp-plugin-m-vslider/nvdExploitThird Party Advisory
- wpscan.com/vulnerability/8b8e41e8-5a40-4062-b5b7-3b01b1a709efnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.