Purine Chu

Name of the Vulnerable Software and Affected Versions: The Social Slider Widget WordPress plugin versions prior to 1.8.5 Description: The issue allows Authenticated Reflected XSS in the plugin settings page. The `token error` parameter can be controlled by users and is directly echoed without being sanitized. Recommendations: For versions prior to 1.8.5, update to version 1.8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin settings page to minimize the risk of exploitation. Avoid using the `token error` parameter in the affected settings page until the issue is resolved.