Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2015-20019

Content text slider on post < 6.9 - Authenticated Stored Cross-Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Content text slider on post WordPress plugin before 6.9 does not sanitise and escape the Title and Message/Content settings, which could lead to Cross-Site Scripting issues

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Content text slider on post

  • 6.9 to < 6.9affected

References