Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-1266

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.1%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
Products affected by CVE-2022-1266
  • None » None » Version:
    _slider_&_carousel_ultimate:-
  • None » None » Version:
    _slider_&_carousel_ultimate:1.0.0
  • None » None » Version:
    _slider_&_carousel_ultimate:1.0.1
  • None » None » Version:
    _slider_&_carousel_ultimate:1.0.2
  • None » None » Version:
    _slider_&_carousel_ultimate:1.1.0
  • None » None » Version:
    _slider_&_carousel_ultimate:1.1.1
  • None » None » Version:
    _slider_&_carousel_ultimate:1.2.0
  • None » None » Version:
    _slider_&_carousel_ultimate:1.3.0
  • None » None » Version:
    _slider_&_carousel_ultimate:1.3.1
  • None » None » Version:
    _slider_&_carousel_ultimate:1.3.2
  • None » None » Version:
    _slider_&_carousel_ultimate:1.3.3
  • None » None » Version:
    _slider_&_carousel_ultimate:1.3.4
  • None » None » Version:
    _slider_&_carousel_ultimate:1.3.5
  • None » None » Version:
    _slider_&_carousel_ultimate:1.3.6
  • None » None » Version:
    _slider_&_carousel_ultimate:1.3.7
  • None » None » Version:
    _slider_&_carousel_ultimate:1.3.8
  • None » None » Version:
    _slider_&_carousel_ultimate:1.4.0
  • None » None » Version:
    _slider_&_carousel_ultimate:1.4.1
  • None » None » Version:
    _slider_&_carousel_ultimate:1.4.2
  • None » None » Version:
    _slider_&_carousel_ultimate:1.4.3
  • Wpwax » Post Grid » Version: Any
    cpe:2.3:a:wpwax:post_grid


Products
Pricing
Contact Us

Shodan ® - All rights reserved