Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows, CVE-2014-4846
- CVE, Research URL
- Home page URL
- Published on
- Jul 10, 2014
- Research Description
- Cross-site scripting (XSS) vulnerability in the Meta Slider (ml-slider) plugin 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to wp-admin/admin.php.
- Affected versions
-
max 2.2.
- Status
-
vulnerable