Now officially on WordPress.org

CVE Database / CVE-2015-5151

CVE

CVE-2015-5151 — Slider Revolution [revslider] < 4.2.3

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2015-5151 Slider Revolution [revslider] < 4.2.3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unknown < 4.2.3 4.2.3 2014-12-17 —

CVE-2015-5151

The Slider Revolution plugin before version 4.2.3 contains a cross-site scripting flaw that could permit attackers to inject malicious scripts into a WordPress site, potentially leading to execution of unauthorized code when visitors access the affected pages. The vulnerability was identified by indoushka and has been resolved in version 4.2.3 or later. Users should upgrade their installations to eliminate the risk of script injection attacks.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings