Slider Hero with Animation, Video Background, CVE-2021-24506

CVE, Research URL: CVE-2021-24506
Home page URL: Security reports for Slider Hero with Animation, Video Background
Application: Slider Hero with Animation, Video Background
Published on: Aug 23, 2021
Research Description: The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin before 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using it in a SQL statement, allowing users with a role as low as Contributor to perform SQL injection.
Affected versions: max 8.2.7.
Status: vulnerable