PT-2021-8383 · WordPress · Content Text Slider

Alireza_Promiss + 1 · Published 2021-11-01 · Updated 2021-11-02 · CVE-2015-20019

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WordPress plugin versions prior to 6.9

Description The issue concerns the Content text slider on post WordPress plugin, where the Title and Message/Content settings are not properly sanitised and escaped, potentially leading to Cross-Site Scripting issues.

Recommendations For versions prior to 6.9, update to version 6.9 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-20019

Affected Products

Content Text Slider

References · 4

• 🔥 https://seclists.org/bugtraq/2015/Dec/124 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-20019 · Security Note
• https://plugins.trac.wordpress.org/changeset/1393044/content-text-slider-on-post · Patch
• https://wpscan.com/vulnerability/4f92b211-e09c-4ed0-bc98-27e0b51b1f86 · Note