WP Zillow Review Slider <= 2.3 - Authenticated (Admin+) Stored Cross-Site Scripting
mediumThe WP Zillow Review Slider WordPress plugin before 2.4 does not escape a settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite)
- CVSS:
- 5.5
- Affected:
- up to 2.4
- Fixed in:
- 2.4
- Disclosed:
- May 30, 2022