Heliossolutions vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Heliossolutions products: 1 record(s), with severity, exploitation and fixes.

HS Brand Logo Slider 1

Exploited only (KEV) →

CVE-2020-37227 High · 8.8 CWE-434 May 16, 2026

WordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File Upload

HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files. Attackers can intercept upload requests to the logoupload parameter in the admin interface and rename files to executable extensions .php to achieve remote code execution.