Read the docs

nextendweb

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

nextendweb records in CISA KEV

No nextendweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smart Slider 3 4 records HIGH Facebook Connect 1 record LOW Nextend Facebook Connect 1 record LOW Nextend Social Login 1 record LOW Nextend Twitter Connect 1 record LOW Smart Slider 1 record LOW

Records

1 record in Smart Slider · all components

TI-2021-06674 CVE-2021-24382 · GHSA-phjq-x57m-mw68

Smart Slider 3 < 3.5.0.9 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 26

The Smart Slider 3 Free and pro WordPress plugins before 3.5.0.9 did not sanitise the Project Name before outputting it back in the page, leading to a Stored Cross-Site Scripting issue.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00676 Published 2021-06-14 Fixed in 3.5.0.9 CWE-79
Open these records in search →