The Slideshow WordPress plugin up to and including 2.3.1 does not sanitize and escape some of its default slideshow settings, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
slideshow project slideshow |