CVE-2018-20368

The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback

published December 23, 2018

CVSS
—
EPSS
1%
Percentile
52.8
In the wild
Unconfirmed
What it is

The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00705 · 52.8th percentile
Published
2018-12-23T02:00Z
EPSS history
Timeline
  • 23 DEC 02:00Z
    The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback
    cvelistv5