Beveiligingsadvies

CVE-2025-15664

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-02 06:00:16

Laatst bijgewerkt 2026-09-02 10:46:00

Toegewezen door WPScan

CVSS-score 6.8

Status PUBLISHED

Beschrijving

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's before-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser of anyone (including an administrator) who views the slider.

← Alle CVE's bekijken Bekijk op cve.org ↗