The metaslider shortcode passed its attributes straight through without sanitising them. A contributor-level user who can add a shortcode to a post could inject arbitrary JavaScript that then executes in the browser of anyone viewing the page. This vulnerability affects the following application versions: Slider, Gallery, and Carousel by... Weiterlesen
Intelligence View
Stored Cross-Site Scripting in MetaSlider Shortcode Attributes
The metaslider shortcode passed its attributes straight through without sanitising them. A contributor-level user who can add a shortcode to a post could inject arbitrary JavaScript that then executes in the browser of anyone viewing the…
SOCIAL SHARE CARD GENERATOR