Video Slider – Slider Carousel < 1.4.8 – Admin+ Stored Cross-Site Scripting | CVE 2022-1541 | Plugin Vulnerabilities

Description

The plugin does not sanitize or escape some of its video settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Proof of Concept

Create/edit a video from a slider and put the following payload in the Description: <img src=x onerror=alert(/XSS/)>, then save/update the video (via the button below the Description textarea) and save/update the Slider (top right button)

The XSS will be triggered in post/page where the Slider is embed

Affects Plugins

Fixed in 1.4.8

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Fayçal CHENA

Submitter

Fayçal CHENA

Submitter website

https://fafachena.com/

Submitter twitter

Verified

Yes

WPVDB ID

053a9815-cf0a-472e-844a-3dea407ce022

Timeline

Publicly Published

2022-05-16 (about 3 years ago)

Added

2022-05-16 (about 3 years ago)

Last Updated

2022-05-17 (about 3 years ago)

Other

Published

Title

Published

2025-01-03

Title

WP Multi Store Locator < 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2025-01-29

Title

Alex Reservations: Smart Restaurant Booking < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Published

2025-07-15

Title

WP Event Manager < 3.1.51 - Unauthenticated Stored Cross-Site Scripting via 'organizer_name'

Published

2024-10-17

Title

WP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta

Published

2015-03-13

Title

Wpml < 3.1.9 - XSS