CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chenyenming Ui Slider Filter By Price ui-slider-filter-by-price allows Reflected XSS.This issue affects Ui Slider Filter By Price: from n/a through <= 1.1.
Explanation of Vulnerability in Simple Terms
The Ui Slider Filter By Price plugin contains a cross-site scripting (XSS) vulnerability in versions 1.1 and earlier. An attacker can inject malicious scripts that execute in a visitor's browser when they interact with the slider. The vulnerability requires user interaction and can affect other users on the site. Update to a version newer than 1.1 to resolve this issue.
What an attacker can do
Inject malicious scripts that run in visitors' browsers, potentially stealing session data or redirecting users.
Potential impact on your site
Visitors may have their sessions compromised or be redirected to malicious sites when using the price filter.
Conditions required to exploit
Visitor must interact with the affected slider component; no authentication required.
Key dates
External resources
Related vulnerabilities
