Simonpedge

simonpedge

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Slide Anything Responsive Content/html Slider And Carousel

slide_anything-responsive_content/html_slider_and_carousel

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-2413 1Simonpedge 1Slide Anything Jun 17, 2026 Jan 16, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript...Show more The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript payload into the slide title even when the unfiltered_html capability is disabled.Show less
CVE-2023-28499 1Simonpedge 1Slide Anything Responsive Content/html Slider And Carousel Jun 17, 2026 Nov 7, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in simonpedge Slide Anything – Responsive Content / HTML Slider and Carousel plugin <= 2.4.9 versions.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2022-2413

1Simonpedge

1Slide Anything

Jun 17, 2026

Jan 16, 2024

N/A· v4

5.4 MEDIUM· v3

N/A· v2

The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting it in the admin pages, allowing a logged in user with roles as low as Author to inject a javascript...Show more

CVE-2023-28499

1Simonpedge

1Slide Anything Responsive Content/html Slider And Carousel

Jun 17, 2026

Nov 7, 2023

N/A· v4

5.4 MEDIUM· v3

N/A· v2

Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in simonpedge Slide Anything – Responsive Content / HTML Slider and Carousel plugin <= 2.4.9 versions.