WordPress Slideshow Gallery Plugin <=1.8.3 Cross-Site Scripting Vulnerability

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Plugin Name: WordPress Slideshow Gallery Plugin - Version Range: <= 1.8.3 - Vulnerability Type: Cross Site Scripting (XSS) - CVSS Score: 5.9 - Description: Allows malicious attackers to inject malicious scripts, such as redirects, ads, and HTML payloads, which will be executed when the website is accessed. 2. Risk: - Scope: Low priority, vPatch not required - Impact: Vulnerable versions <= 1.8.3 - Fixed Version: 1.8.4 3. Solution: - Recommendation: Update to version 1.8.4 or higher. - Note: Updating to 1.8.4 or later removes this vulnerability. Patchstack users can enable automatic updates. 4. Details: - Software: WordPress Slideshow Gallery Plugin - Type: Plugin - Affected Versions: <= 1.8.3 - Fixed Version: 1.8.4 5. Timeline: - Report Date: September 18, 2024 - Early Warning Sent: September 30, 2024 - Release Date: October 2, 2024 6. Additional Information: - Virtual Patch: Virtual patching feature provided by Patchstack. - Purpose of Virtual Patch: Protects websites from known vulnerabilities. - Limitation of Virtual Patch: Only applicable to WordPress plugins and themes. - Usage of Virtual Patch: No software download or installation required; simply enable it on the Patchstack platform. This information helps users understand the severity, scope, and remediation steps for the vulnerability, enabling them to take appropriate actions to protect their websites.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Slideshow Gallery Plugin <=1.8.3 Cross-Site Scripting Vulnerability