Skip to content
OpenAdvisories

Vendor

2j-slideshow

2 known vulnerabilities.

Products

Slideshow, Image Slider by 2J 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-4604

    Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting via 'post'

    The Slideshow, Image Slider by 2J plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ parameter in versions up to, and including, 1.3.54 due to insufficient input sanitization and output escaping. This makes it possible for una…

    2j-slideshow Slideshow, Image Slider by 2J Web / CMS
  • Medium 5.4
    CVE-2020-36729

    Slideshow, Image Slider by 2J <= 1.3.31 - Authorization Bypass

    The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'twoj_slideshow_setup' function called via the wp_ajax_twoj_slideshow_setup AJAX action in versions up to, and including, 1.3.31. This makes i…

    2j-slideshow Slideshow, Image Slider by 2J Web / CMS