Lucene search

2Joomla Security Vulnerabilities

cve

CVE-2020-36729

The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'twoj_slideshow_setup' function called via the wp_ajax_twoj_slideshow_setup AJAX action in versions up to, and including, 1.3.31. This makes it possible for authenticated attackers (...

5.4CVSS

4.4AI Score

0.001EPSS

2023-06-07 02:15 AM

cve

CVE-2022-29426

Authenticated (contributor or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in 2J Slideshow Team's Slideshow, Image Slider by 2J plugin <= 1.3.54 at WordPress.

5.4CVSS

5.3AI Score

0.001EPSS

2022-05-20 09:15 PM

cve

CVE-2023-44242

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in 2J Slideshow Team Slideshow, Image Slider by 2J plugin <= 1.3.54 versions.

6.5CVSS

5.5AI Score

0.0005EPSS

2023-10-02 11:15 AM