Lucene search
WPScanCVELIST:CVE-2022-2823HistoryOct 10, 2022 - 12:00 a.m.
CVE-2022-2823 Slider, Gallery, and Carousel by MetaSlider < 3.27.9 - Admin+ Stored Cross Site Scripting
2022-10-1000:00:00
CWE-79
WPScan
www.cve.org
2
cve-2022-2823; wordpress plugin; stored cross-site scripting; metaslider; admin privileges
EPSS
0.001
Percentile
24.8%
The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.27.9 does not sanitise and escape some of its Gallery Image parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CNA Affected
[
{
"vendor": "Unknown",
"product": "Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Plugin",
"versions": [
{
"version": "3.27.9",
"status": "affected",
"lessThan": "3.27.9",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2022-2823
2022-10-10 21:15:10
cve
cve
CVE-2022-2823
2022-10-10 21:15:10
wpvulndb
wpvulndb
wpexploit
wpexploit
openvas
openvas
patchstack
patchstack
prion
prion
Cross site scripting
2022-10-10 21:15:00