← Database

CVE-2022-3074

MEDIUM CVSS: 4.8 Published: 2022-09-26 Modified: 2026-06-17

Description

The Slider Hero WordPress plugin before 8.4.4 does not escape the slider Name, which could allow high-privileged users to perform Cross-Site Scripting attacks.

Affected Platforms

Quantumcloud Slider Hero

Weakness Type

CWE-79

References