Lucene search
PRIOn knowledge basePRION:CVE-2022-1266HistoryJun 20, 2022 - 11:15 a.m.
Cross site scripting
2022-06-2011:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
24.8%
The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| post_grid\\,_slider_\\&_carousel_ultimate | lt | 1.5.0 |
Related
cnvd
cnvd
WordPress Post Grid,Slider
2022-06-22 00:00:00
cve
cve
CVE-2022-1266
2022-06-20 11:15:09
wpvulndb
wpvulndb
Post Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSS
2022-05-26 00:00:00
wpexploit
wpexploit
Post Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSS
2022-05-26 00:00:00
cvelist
cvelist
patchstack
patchstack
nvd
nvd
CVE-2022-1266
2022-06-20 11:15:09