Non notée
CVE-2021-24196 The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page…
Description
The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page as the ‘token_error’ parameter can be controlled by users and it is directly echoed without being sanitized
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Social Slider Widget 1.8 | premières → < 1.8.5 | 1.8.5 |