Monitor free

Report

New Known

Not fixed

WordPress Slideshow, Image Slider by 2J plugin <= 1.3.54 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

5.4

CVSS 3.1 score Medium severity

Report

Monitoring Not reported to be exploited

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

Images Slideshow by 2J

Type

Plugin

Vulnerable versions

<= 1.3.54

Fixed in

N/A

PSID

34488dcd2491

CVE ID

CVE-2022-29426

Classification

Cross Site Scripting (XSS)

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Required privilege

Requires contributor or higher role user authentication.

Credits

Tien Nguyen Ahn (Patchstack Alliance)

Publicly disclosed

2022-05-04

Patchstack vPatch available since

09.12.2021

Details

Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered by Tien Nguyen Ahn aka vigov5 (Patchstack Alliance) in WordPress Slideshow, Image Slider by 2J plugin (versions <= 1.3.54).

Solution

No patched version is available. No reply from the vendor.

References