WordPress Slider Revolution Plugin <= 4.2.2 - XSS

2015-06-3000:00:00

indoushka

patchstack.com

0.002 Low

EPSS

Percentile

52.1%

This vulnerability allows an attacker to inject arbitrary web script or HTML via the “client_action” parameter.

Solution

           Update the plugin.

CPENameOperatorVersion
slider revolutionle4.2.2

CPE	Name	Operator	Version
	slider revolution	le	4.2.2

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5151

0.002 Low

EPSS

Percentile

52.1%

Related for PATCHSTACK:F49549503DC832B39A3CA49780E2779A