The Slide Anything WordPress plugin... CVE-2022-1303

3.5 AV AC AU C I A
发布: 2022-05-09
修订: 2024-11-21

The Slide Anything WordPress plugin before 2.3.44 does not sanitize and escape sliders' description, which could allow high privilege users such as editor and above to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

0%
暂无可用Exp或PoC
当前有1条受影响产品信息