Vulnerabilities > Averta

DATE CVE VULNERABILITY TITLE RISK
2018-12-23 CVE-2018-20368 Cross-site Scripting vulnerability in Averta Master Slider 3.2.7/3.5.1
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback.
network
low complexity
averta CWE-79
5.4