CVE-2022-1303

The CVE-2022-1303 entry concerns the WordPress Slide Anything plugin prior to version 2.3.44. The vulnerability is a stored Cross-Site Scripting (XSS) flaw caused by insufficient sanitization/escaping of the sliders’ description, allowing elevated users (Editor+ or similar) to inject script code,...