CVE-2025-31928 in Multimedia Responsive Carousel with Image Video Audio Support Plugin

Sumário

de MITRE • 16/05/2025

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Multimedia Responsive Carousel with Image Video Audio Support allows SQL Injection. This issue affects Multimedia Responsive Carousel with Image Video Audio Support: from n/a through 2.6.0.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: Patchstack
• Reservar: 01/04/2025
• Divulgação: 16/05/2025
• Moderação: aceite
• Entrada: VDB-309335
• CPE: pronto
• CWE: CWE-89 (confirmado)
• CVSS: 8.5 (CNA)
• EPSS: 0.00292
• KEV: não
• Atividades: muito baixo
• Sector: Hostingprovider

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-31928
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-31928
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-31928/