Not rated
CVE-2022-1541 The Video Slider WordPress plugin before 1.4.8 does not sanitize or escape some of its video settings, which could allow…
Description
The Video Slider WordPress plugin before 1.4.8 does not sanitize or escape some of its video settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Video Slider – Slider Carousel 1.4 | earliest → < 1.4.8 | 1.4.8 |