Yoo Slider Vulnerabilities

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yooslider Yoo Slider allows Reflected XSS.This issue affects Yoo Slider: from n/a through 2.1.1.

Affected:

up to 2.2.0

Fixed in:

2.2.0

Disclosed:

Mar 31, 2024

CVE-2024-31106 on NVD →

The Yoo Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully tric...

CVSS:

6.1

Affected:

up to 2.1.1

Fixed in:

2.2.0

Disclosed:

Mar 29, 2024

CVE-2024-31106 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to create or modify slider.

Affected:

up to 2.1.0

Fixed in:

2.1.0

Disclosed:

Apr 13, 2022

CVE-2022-27846 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to import templates.

Affected:

up to 2.1.0

Fixed in:

2.1.0

Disclosed:

Apr 13, 2022

CVE-2022-27847 on NVD →

Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to import templates.

CVSS:

4.3

Affected:

up to 2.0.0

Fixed in:

2.1.0

Disclosed:

Apr 11, 2022

CVE-2022-27847 on NVD →

Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to create or modify slider.

CVSS:

4.3

Affected:

up to 2.0.0

Fixed in:

2.1.0

Disclosed:

Apr 11, 2022

CVE-2022-27846 on NVD →

[en] Cross-Site Request Forgery (CSRF) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers to trick authenticated users into unwanted slider duplicate or delete action.

Affected:

up to 2.1.0

Fixed in:

2.1.0

Disclosed:

Mar 23, 2022

CVE-2022-25608 on NVD →

[en] Stored Cross-Site Scripting (XSS) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers with contributor or higher user role to inject the malicious code.

Affected:

up to 2.1.0

Fixed in:

2.1.0

Disclosed:

Mar 23, 2022

CVE-2022-25609 on NVD →

Stored Cross-Site Scripting (XSS) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers with contributor or higher user role to inject the malicious code.

CVSS:

5.4

Affected:

up to 2.1.0

Fixed in:

2.1.0

Disclosed:

Mar 21, 2022

CVE-2022-25609 on NVD →

Cross-Site Request Forgery (CSRF) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers to trick authenticated users into unwanted slider duplicate or delete action.

CVSS:

5.4

Affected:

up to 2.1.0

Fixed in:

2.1.0

Disclosed:

Mar 21, 2022

CVE-2022-25608 on NVD →