Vulnerabilities > Averta > Master Slider > 3.2.7

DATE CVE VULNERABILITY TITLE RISK
2023-11-16 CVE-2023-47508 Cross-site Scripting vulnerability in Averta Master Slider 3.2.7/3.5.1
Unauth.
network
low complexity
averta CWE-79
6.1
6.1
2018-12-23 CVE-2018-20368 Cross-site Scripting vulnerability in Averta Master Slider 3.2.7/3.5.1
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback.
network
averta CWE-79
3.5
3.5