CVE-2026-116398: WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges and user interaction. The attack can be performed over the network with low complexity.

Q: Is this a stored or reflected XSS issue?

This is a stored XSS vulnerability. Malicious input can be saved by the affected plugin and later executed when a user views the generated page content.

Q: What versions are affected?

Content Slider Block versions through 3.2.1 are affected. The provided data does not identify a fixed version.

Q: What impact can successful exploitation have?

The CVSS vector indicates low impact to confidentiality, integrity, and availability, with scope changed. Successful XSS may execute attacker-controlled script in the context of users viewing affected content.

Published Oct 26, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Content Slider Block content-slider-block allows Stored XSS.This issue affects Content Slider Block: from n/a through 3.2.1.

Affected Software

1 affected component

bPlugins Content Slider Block<=3.2.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Content Slider Block to a version that resolves this vulnerability.
Fixed in 3.2.2

Event History

Oct 26, 2026

CVE Published

via MITRE·05:26 PM

Data Sourced

via MITRE·05:26 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges and user interaction. The attack can be performed over the network with low complexity.

Is this a stored or reflected XSS issue?

This is a stored XSS vulnerability. Malicious input can be saved by the affected plugin and later executed when a user views the generated page content.

What versions are affected?

Content Slider Block versions through 3.2.1 are affected. The provided data does not identify a fixed version.

What impact can successful exploitation have?

The CVSS vector indicates low impact to confidentiality, integrity, and availability, with scope changed. Successful XSS may execute attacker-controlled script in the context of users viewing affected content.

CVE-2026-116398: WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Is this a stored or reflected XSS issue?

What versions are affected?

What impact can successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Is this a stored or reflected XSS issue?

What versions are affected?

What impact can successful exploitation have?