Description (CNA)
The Content text slider on post WordPress plugin before 6.9 does not sanitise and escape the Title and Message/Content settings, which could lead to Cross-Site Scripting issues
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Content text slider on post | affected 6.9 before 6.9 |
CWE
CWE-79
References
- https://seclists.org/bugtraq/2015/Dec/124
- https://wpscan.com/vulnerability/4f92b211-e09c-4ed0-bc98-27e0b51b1f86
- https://plugins.trac.wordpress.org/changeset/1393044/content-text-slider-on-post
ADP enrichment
No English description supplied.