CVE-2025-31928 in Multimedia Responsive Carousel with Image Video Audio Support Plugin

Resumen

por MITRE • 2025-05-16

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Multimedia Responsive Carousel with Image Video Audio Support allows SQL Injection. This issue affects Multimedia Responsive Carousel with Image Video Audio Support: from n/a through 2.6.0.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: Patchstack
• Reservar: 2025-04-01
• Divulgación: 2025-05-16
• Moderación: aceptado
• Artículo: VDB-309335
• CPE: listo
• CWE: CWE-89 (confirmado)
• CVSS: 8.5 (CNA)
• EPSS: 0.00292
• KEV: no
• Actividades: muy bajo
• Sector: Hostingprovider

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-31928
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-31928
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-31928/