The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript…
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.0053·Published 2024-01-16·Fixed in 2.3.47CWE-79