LambertGroup Chameleon HTML5 Audio Player SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the LambertGroup Chameleon HTML5 Audio Player With/Without Playlist, affecting versions through 3.5.6. This vulnerability arises from improper neutralization of special elements used in SQL commands, allowing malicious actors to manipulate database queries and potentially access or modify database information.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to interact with the database of the WordPress site. This could include stealing, modifying, or deleting information stored in the database.