PT-2026-39498 · Soliloquywp · Slider By Soliloquy

Abdurrahman Erkan · Published 2026-05-10 · Updated 2026-05-10 · CVE-2021-47922

NVD

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of users viewing the slider on both administrative and frontend pages.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-47922

Affected Products

Slider By Soliloquy

References · 5

• 🔥 https://exploit-db.com/exploits/50563 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47922 · Security Note
• https://soliloquywp.com · Note
• https://wordpress.org/plugins/soliloquy-lite · Note
• https://vulncheck.com/advisories/wordpress-plugin-slider-by-soliloquy-stored-xss · Note