Beveiligingsadvies

CVE-2022-2413

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-16 15:49:54

Laatst bijgewerkt 2025-05-22 18:22:23

Toegewezen door WPScan

CVSS-score 5.4

Status PUBLISHED

Beschrijving

The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript payload into the slide title even when the unfiltered_html capability is disabled.

← Alle CVE's bekijken Bekijk op cve.org ↗