CVE-2021-24196CWE-79

Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)

published April 5, 2021

CVSS
—
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page as the ‘token_error’ parameter can be controlled by users and it is directly echoed without being sanitized

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00679 · 51.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-04-05T18:27Z
EPSS history
Timeline
  • 05 APR 18:27Z
    Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)
    cvelistv5