← voltar
CVE-2021-24196CWE-79

Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.7%
probabilidade de exploração
0.7%top 51% das CVEs
exploração observada
nãonenhuma fonte reporta
The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page as the ‘token_error’ parameter can be controlled by users and it is directly echoed without being sanitized