CVE-2022-1320: Sliderby10Web < 1.2.52 - Admin+ Stored Cross-Site Scripting
First published: Mon May 23 2022(Updated: )
The Sliderby10Web WordPress plugin before 1.2.52 does not properly sanitize and escape some of its settings, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Credit: contact@wpscan.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| 10web Sliderby10web | <1.2.52 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-1320?
CVE-2022-1320 is a vulnerability in the Sliderby10Web WordPress plugin that allows high-privileged users to perform Cross-Site Scripting attacks.
How does CVE-2022-1320 impact the Sliderby10Web WordPress plugin?
CVE-2022-1320 allows high-privileged users, such as admin, to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
What is the severity of CVE-2022-1320?
CVE-2022-1320 has a severity rating of medium (4.8).
How can I mitigate the CVE-2022-1320 vulnerability in the Sliderby10Web WordPress plugin?
To mitigate the CVE-2022-1320 vulnerability, update the Sliderby10Web plugin to version 1.2.52 or later, which properly sanitizes and escapes the settings.
Where can I find more information about CVE-2022-1320?
More information about CVE-2022-1320 can be found at https://wpscan.com/vulnerability/43581d6b-333a-48d9-a1ae-b9479da8ff87
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/title
- agent/weakness
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/10web
- canonical/10web sliderby10web