Lucene search

K
wpvulndbWpvulndbWPVDB-ID:3CDE24F3-AAAD-4EB3-B6BA-A518AFE66FBE
HistoryNov 23, 2023 - 12:00 a.m.

Slider Revolution < 6.6.15 - Authenticated (Contributor+) Stored Cross-Site Scripting

2023-11-2300:00:00
wpscan.com
13
slider revolution
wordpress
vulnerable
stored cross-site scripting
insufficient input sanitization
output escaping
authenticated attackers
web scripts

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

Description The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.6.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CPENameOperatorVersion
eq6.6.15

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

Related for WPVDB-ID:3CDE24F3-AAAD-4EB3-B6BA-A518AFE66FBE