Lucene search
WPScanCVELIST:CVE-2022-2823HistoryOct 10, 2022 - 12:00 a.m.
CVE-2022-2823 Slider, Gallery, and Carousel by MetaSlider < 3.27.9 - Admin+ Stored Cross Site Scripting
2022-10-1000:00:00
CWE-79
WPScan
www.cve.org
cve-2022-2823; wordpress plugin; stored cross-site scripting; metaslider; admin privileges
0.001 Low
EPSS
Percentile
25.0%
The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its Gallery Image parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CNA Affected
[
{
"vendor": "Unknown",
"product": "Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Plugin",
"versions": [
{
"version": "3.27.9",
"status": "affected",
"lessThan": "3.27.9",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
wpexploit
wpexploit
openvas
openvas
cve
cve
CVE-2022-2823
2022-10-10 21:15:10
nvd
nvd
CVE-2022-2823
2022-10-10 21:15:10
patchstack
patchstack
prion
prion
Cross site scripting
2022-10-10 21:15:00