CVE-2023-5435: Up down image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode
The Up down image slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 12.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with subscriber-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-5435?
CVE-2023-5435 is a vulnerability in the Up down image slideshow gallery plugin for WordPress which allows SQL Injection via the plugin's shortcode.
How does CVE-2023-5435 work?
CVE-2023-5435 works by exploiting insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query, allowing an attacker to inject malicious SQL code.
What is the severity of CVE-2023-5435?
CVE-2023-5435 has a severity score of 8.8 (high).
How can I fix CVE-2023-5435?
To fix CVE-2023-5435, update the Up down image slideshow gallery plugin for WordPress to a version above 12.1.
Where can I find more information about CVE-2023-5435?
You can find more information about CVE-2023-5435 at the following references: [Wordfence](https://www.wordfence.com/threat-intel/vulnerabilities/id/0b72cf6f-4924-4fa5-8e1a-4054dfe73be0?source=cve), [WordPress Plugin Repository](https://plugins.trac.wordpress.org/browser/up-down-image-slideshow-gallery/trunk/up-down-image-slideshow-gallery.php?rev=2827173#L208), and [WordPress Plugin Changeset](https://plugins.trac.wordpress.org/changeset/2985497/up-down-image-slideshow-gallery#file1).