CVE-2023-28499

Опубликовано: 07 нояб. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in simonpedge Slide Anything – Responsive Content / HTML Slider and Carousel plugin <= 2.4.9 versions.

Ссылки

https://patchstack.com/database/vulnerability/slide-anything/wordpress-slide-anything-plugin-2-4-7-cross-site-scripting-xss-vulnerability?_s_id=cve
Third Party Advisory
https://patchstack.com/database/vulnerability/slide-anything/wordpress-slide-anything-plugin-2-4-7-cross-site-scripting-xss-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:simonpedge:slide_anything-responsive_content\/html_slider_and_carousel:*:*:*:*:*:*:*:*

Версия до 2.4.9 (включая)

EPSS

Процентиль: 44%

0.0022

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-r5r8-fxfq-hj6q