Not rated
CVE-2021-24196 The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page…
Description
The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page as the ‘token_error’ parameter can be controlled by users and it is directly echoed without being sanitized
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Social Slider Widget 1.8 | earliest → < 1.8.5 | 1.8.5 |