2 matches found
CVE-2022-1303
The Slide Anything WordPress plugin before 2.3.44 does not sanitize and escape sliders' description, which could allow high privilege users such as editor and above to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
4.8CVSS0.00598EPSS
SaveExploits2References1
CVE-2022-1303: Improper Neutralization of Input During Web Page Generation
The Slide Anything WordPress plugin before 2.3.44 does not sanitize and escape sliders' description, which could allow high privilege users such as editor and above to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
4.8CVSS5.7AI score0.00598EPSS
SaveExploits2References2
20