PT-2022-19612

Name of the Vulnerable Software and Affected Versions Image Slider by NextCode plugin versions = 1.1.2 Description The issue is an Authenticated Persistent Cross-Site Scripting XSS vulnerability. This means that an attacker with at least author-level access can inject malicious scripts into the...

CVE-2022-29438: Improper Neutralization of Input During Web Page Generation

Authenticated author or higher user role Persistent Cross-Site Scripting XSS vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress...

PT-2022-19611

Name of the Vulnerable Software and Affected Versions Image Slider by NextCode plugin versions = 1.1.2 Description The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web...

CVE-2022-29437: Cross-Site Request Forgery (CSRF)

Multiple Cross-Site Request Forgery CSRF vulnerabilities in Image Slider by NextCode plugin = 1.1.2 at WordPress...

CVE-2022-29439: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Image Slider by NextCode plugin = 1.1.2 at WordPress allows deleting slides...

PT-2022-19613

Name of the Vulnerable Software and Affected Versions Image Slider by NextCode plugin versions = 1.1.2 Description A Cross-Site Request Forgery CSRF issue allows unauthorized deletion of slides. Recommendations For Image Slider by NextCode plugin versions = 1.1.2, update to a version higher than...