Vulnerabilities

TI-2022-01183 CVE-2022-1299 · GHSA-4x8p-6353-gxp9

Slideshow <= 2.3.1 - Admin+ Stored Cross-Site Scripting

LOW 23

The Slideshow WordPress plugin through 2.3.1 does not sanitize and escape some of its default slideshow settings, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when th…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-05-30 No fix listed CWE-79

TI-2015-03075 CVE-2015-3634 · GHSA-prcg-m67x-cqrh

The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow…

LOW 39

The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow plugin 2.2.8 through 2.2.21 for Wordpress allows remote attackers to read arbitrary Wordpress option values.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03488 Published 2017-06-08 No fix listed CWE-200

Vulnerabilities

Filters

Slideshow <= 2.3.1 - Admin+ Stored Cross-Site Scripting

The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow…