CVE Database /
CVE-2023-0660
CVE · Medium
CVE-2023-0660 — Smart Slider 3 [smart-slider-3] < 3.5.1.14
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-0660
|
Smart Slider 3 [smart-slider-3] < 3.5.1.14 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 3.5.1.14
|
3.5.1.14 |
2023-02-28 |
—
|
CVE-2023-0660
The Smart Slider 3 plugin prior to version 3.5.1.14 contains a cross-site scripting flaw that enables attackers to embed malicious code into affected websites. An attacker exploiting this vulnerability could inject harmful scripts that execute in the browsers of site visitors, potentially deploying redirects, unwanted advertisements, or other malicious content. The vulnerability was discovered by Erwan LR from WPScan and has been resolved in version 3.5.1.14 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings