CVE-2018-20368: Improper Neutralization of Input During Web Page Generation

The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...

PT-2018-15324

Name of the Vulnerable Software and Affected Versions Master Slider plugin versions 3.2.7 and 3.5.1 Description The issue concerns a problem with the Master Slider plugin for WordPress. It is related to XSS via the "Name" input field of the MSPanel.Settings value on Callback, which is accessible...