cleantalk
Vulnerabilities and Security Researches

Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows, 151ec256-7c21-40db-84cb-d8b68f5c4973

Published on
-
Research Description
Slider, Gallery, and Carousel by MetaSlider &#8211; Image Slider, Video Slider [ml-slider] < 3.17.2 MetaSlider &lt; 3.17.2 - Authenticated Stored Cross-Site Scripting (XSS) Vishnupriya Ilango, from Fortinet&#039;s FortiGuard Lab, discovered a stored Cross-Site Scripting (XSS) vulnerability in Metaslider plugin (v3.17.1), which exists in Image caption or description parameter in the slide creation module.
Affected versions
max 3.17.2.
Status
vulnerable