CVE-2023-28499

CVE-2023-28499: WordPress Slide Anything Plugin <= 2.4.9 is vulnerable to Cross Site Scripting (XSS)

Vendor Simonpedge

Product Slide Anything – Responsive Content / HTML Slider and Carousel

Weakness CWE-79 · XSS

Published November 7, 2023

Last update April 29, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in simonpedge Slide Anything – Responsive Content / HTML Slider and Carousel plugin <= 2.4.9 versions.

Key dates

02Disclosure timeline

November 7, 2023 CVE published

April 29, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-28499 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-22513 WordPress Simple Locator Plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2023-6717 Keycloak: xss via assertion consumer service url in saml post-binding flow CVE-2022-2278 Featured Image from URL < 4.0.1 - Admin+ Stored Cross-Site Scripting CVE-2026-1391 Vzaar Media Management <= 1.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] CVE-2025-10943 MikeCen WeChat-Face-Recognition wx.php valid cross site scripting