medium5.4
CVE-2021-24196
The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page as the ‘token_error’ parameter can be co…
Impact
The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page as the ‘token_error’ parameter can be controlled by users and it is directly echoed without being sanitized
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cm-Wp | Social Slider Widget | before 1.8.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://purinechu.github.io/posts/social_slider_widget_reflected_xss/
- https://wpscan.com/vulnerability/bb20d732-a5e4-4140-ab51-b2aa1a53db12
- https://purinechu.github.io/posts/social_slider_widget_reflected_xss/
- https://wpscan.com/vulnerability/bb20d732-a5e4-4140-ab51-b2aa1a53db12