CVE-2023-28622

Auth. author+ Stored Cross-Site Scripting XSS vulnerability in Trident Technolabs Easy Slider Revolution plugin = 1.0.0 versions...

CVE-2023-28622

CVE-2023-28622 affects the WordPress plugin Easy Slider Revolution (Trident Technolabs) ≤ 1.0.0. The issue is a Stored Cross-Site Scripting (XSS) vulnerability exploitable via the esrcpt_slider_allow_iframes_filter vector, with public references noting unpatched status prior to a fix in version 1...

WordPress Easy Slider Revolution Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Easy Slider Revolution Type Plugin Vulnerable versions = 1.0.0 Fixed in 1.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28622 Patch priority Medium CVSS severity Medium 5.9 Developer Claim ownership PSID e200bc473eac Credits Yuki Harum...