Lucene search

K
wpvulndbWpvulndbWPVDB-ID:7AA7707D-BE54-48C9-BBBA-D0CB28538C1D
HistoryJan 19, 2023 - 12:00 a.m.

Camera slideshow <= 1.4.0.1 - Reflected Cross-Site Scripting

2023-01-1900:00:00
wpscan.com
5
camera slideshow
cross-site scripting
vulnerability
high privilege users

0.001 Low

EPSS

Percentile

27.3%

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

CPENameOperatorVersion
camera-slideshoweq*

0.001 Low

EPSS

Percentile

27.3%

Related for WPVDB-ID:7AA7707D-BE54-48C9-BBBA-D0CB28538C1D