Lucene search
WpvulndbWPEX-ID:3FE712BC-CE7F-4B30-9FC7-1FF15AA5B6CEHistoryFeb 28, 2023 - 12:00 a.m.
Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS
2023-02-2800:00:00
wpvulndb
91
smart slider 3
vulnerability
contributor
stored
xss
exploit
EPSS
0.001
Percentile
23.3%
The plugin does not properly validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
[smartslider3 slider="'-alert(/XSS/)-'a" slide="1"]
[smartslider3 slider="'\x5d=1;alert(/XSS/)//" slide="1"]Related
prion
prion
Cross site scripting
2023-03-27 16:15:00
cve
cve
CVE-2023-0660
2023-03-27 16:15:09
nvd
nvd
CVE-2023-0660
2023-03-27 16:15:09
wpvulndb
wpvulndb
Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS
2023-02-28 00:00:00
cvelist
cvelist
CVE-2023-0660 Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS
2023-03-27 15:37:19
openvas
openvas
WordPress The Smart Slider 3 Plugin < 3.5.1.14 XSS Vulnerability
2023-03-29 00:00:00
wordfence
wordfence