CVE-2022-1301

CVE-2022-1301: WP Contact Slider < 2.4.7 - Editor+ Stored Cross-Site Scripting

Vendor Unknown

Product WP Contact Slider

Weakness CWE-79 · XSS

Published July 4, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WP Contact Slider WordPress plugin before 2.4.7 does not sanitize and escape the Text to Display settings of sliders, which could allow high privileged users such as editor and above to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

Key dates

02Disclosure timeline

July 4, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1301 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

CVE-2022-1301: WP Contact Slider < 2.4.7 - Editor+ Stored Cross-Site Scripting

01Description

02Disclosure timeline

03References

04Related CVE