← CVE Intelligence

CVE-2022-1266

Post Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSS PUBLISHED

Description (CNA)

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Affected (CNA)

Vendor / productVersions
Unknown / Post Grid, Slider & Carousel Ultimateaffected 1.5.0 before 1.5.0

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.