cleantalk
Vulnerabilities and Security Researches

visualslider Sldier, CVE-2025-23448

CVE, Research URL

CVE-2025-23448

Home page URL

Security reports for visualslider Sldier

Application

visualslider Sldier

Published on
Apr 17, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dastan800 visualslider Sldier allows Reflected XSS. This issue affects visualslider Sldier: from n/a through 1.1.1.
Affected versions
Min -, max 1.1.1.
Status
vulnerable
Previous vulnerability researches
Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce (CVE-2024-5756) , Jun 22, 2024
Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce (CVE-2024-12567) , Jan 14, 2025
Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce (CVE-2024-12566) , Jan 14, 2025
Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce (CVE-2024-11636) , Jan 14, 2025
Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce (CVE-2024-12568) , Jan 14, 2025
New vulnerability
WordPress Job Board and Recruitment Plugin – JobWP (CVE-2025-2010) , Apr 20, 2025
WP Logger (CVE-2025-39456) , Apr 20, 2025
visualslider Sldier (CVE-2025-23448) , Apr 20, 2025
RSS Manager (CVE-2025-39418) , Apr 20, 2025
Contact Form vCard Generator (CVE-2025-39521) , Apr 20, 2025