CVE-2016-1000121 Joomla! Huge-IT Slider Extension SQL Injection and Cross-Site Scripting Vulnerabilities

Joomla! is a free open-source content management system written in PHP. It uses object oriented programming techniques and is built on a model-view-controller web application framework. It includes features such as page caching, RSS feeds, printable versions of pages, news flashes, blogs, polls, search, and support for language internationalization. Huge-IT Slider is a Joomla! slider component. Affected Versions:
Huge IT Joomla Slider 1.0.9, older versions may also be affected.

Depending on the vulnerability being exploited, an anuthenticated, remote attacker could conduct cross-site scripting or SQL injections on a targeted system.

The vendor hasn't confirmed the fix, however the latest version of Huge-IT Slider can be downloaded here.