RSS   Vulnerabilities for 'Slideshow ck'   RSS

2022-06-13
 
CVE-2022-1335

CWE-79
 

 
The Slideshow CK WordPress plugin before 1.4.10 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed

 

 >>> Vendor: Ceikay 2 Products
Carousel ck
Slideshow ck


Copyright 2024, cxsecurity.com

 

Back to Top