Threats tagged 'ghsa-gvvh-735h-j96c'

The Slick Slider WordPress plugin before version 0.5.3 contains a stored Cross-Site Scripting (XSS) vulnerability. This occurs because the plugin does not properly sanitize and escape a shortcode attribute value before outputting it in an HTML attribute. Users with Contributor role or higher can exploit this to inject malicious scripts that execute when other users view the affected post. The vulnerability has a medium severity score of 5.4.