← Back

Slide Anything

slide_anything

Vendor: Simonpedge • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-2413
1Simonpedge
1Slide Anything
Jun 17, 2026
Jan 16, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript...Show more
The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript payload into the slide title even when the unfiltered_html capability is disabled.Show less