Lucene search
Fayçal CHENAWPEX-ID:CFC80857-8674-478F-9604-7A8849E5B85EHistoryMay 18, 2022 - 12:00 a.m.
Slideshow CK < 1.4.10 - Admin+ Stored Cross-Site Scripting
2022-05-1800:00:00
Fayçal CHENA
73
0.001 Low
EPSS
Percentile
24.8%
The plugin does not sanitize and escape Slide’s descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed
Create/edit a Slideshow, add a Slide and put the following payload in the Description <img src onerror=alert(/XSS/)>
The XSS will be triggered in page/post where the Slideshow is embedRelated
cnvd
cnvd
WordPress Slideshow CK plugin跨站脚本漏洞
2022-06-15 00:00:00
cvelist
cvelist
CVE-2022-1335 Slideshow CK < 1.4.10 - Admin+ Stored Cross-Site Scripting
2022-06-13 12:41:44
patchstack
patchstack
prion
prion
Cross site scripting
2022-06-13 13:15:00
nvd
nvd
CVE-2022-1335
2022-06-13 13:15:10
cve
cve
CVE-2022-1335
2022-06-13 13:15:10
wpvulndb
wpvulndb
Slideshow CK < 1.4.10 - Admin+ Stored Cross-Site Scripting
2022-05-18 00:00:00