CVE-2026-54867: WordPress Responsive Slider plugin <= 0.1.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue affects Responsive Slider: from n/a through 0.1.9.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs at least low-level privileges in WordPress and must persuade a user to perform an interaction. The vulnerability is remotely reachable and can lead to impacts beyond the vulnerable component because the scope is changed.
Which installations are affected?
Griden Responsive Slider versions through 0.1.9 are affected. The supplied data does not state whether any particular WordPress role, plugin setting, or default configuration is required.
What impact can successful exploitation have?
Successful exploitation allows stored cross-site scripting. The supplied severity vector indicates low confidentiality, integrity, and availability impact.