253 matches found
CVE-2018-20368
CVE-2018-20368 affects the WordPress Master Slider plugin (versions around 3.2.7 and 3.5.1) and causes an XSS via the wp-admin/admin-ajax.php Name input field in the MSPanel.Settings value during Callback. The connected sources consistently describe it as a cross‑site scripting vulnerability in M...
CVE-2018-20368
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...
CVE-2018-20368: Improper Neutralization of Input During Web Page Generation
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback...
PT-2018-15324
Name of the Vulnerable Software and Affected Versions Master Slider plugin versions 3.2.7 and 3.5.1 Description The issue concerns a problem with the Master Slider plugin for WordPress. It is related to XSS via the "Name" input field of the MSPanel.Settings value on Callback, which is accessible...
WordPress Plugin WP Master Slider Cross-Site Scripting Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin WP Master Slider version v3.5.1, which can be exploited by an...
Master Slider <= 3.7.0 - Authenticated Stored Cross-Site Scripting (XSS)
The plugin does not properly sanitise the slider name when creating or editing a slider, leading to an Authenticated editor+ Stored Cross-Site Scripting issue which will be triggered in the Slider table /wp-admin/admin.php?page=master-slider. Edit WPScanTeam: - The original report was from 2018,...
Master Slider <= 3.7.0 - Authenticated Stored Cross-Site Scripting (XSS)
The plugin does not properly sanitise the slider name when creating or editing a slider, leading to an Authenticated editor+ Stored Cross-Site Scripting issue which will be triggered in the Slider table /wp-admin/admin.php?page=master-slider. Edit WPScanTeam: - The original report was from 2018,...
WP Master Slider v3.5.1 - Cross Site Scripting Vulnerability
Document Title: =============== WP Master Slider v3.5.1 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2158 Reference: https://wordpress.org/support/?posttype=topic&p=10874555...
WordPress Master Slider Plugin <= 2.7.1 - Reflected Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Upgrade this plugin...
Master Slider <= 2.7.1 - Reflected Cross-Site Scripting (XSS)
The Master Slider – Responsive Touch Slider WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
WordPress Master Slider 2.7.1 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Master Slider WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...