Approved changes feed: RSS · Atom

cpe:2.3:a:averta:master_slider:3.5.1:*:*:*:*:wordpress:*:*

part: a version: 3.5.1 update: *

VendorAverta (054c540e-9470-56d7-bb73-99461b2dbaae)
ProductMaster Slider (05f56d75-cc78-5a27-8093-e682b8160881)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/master-slider purl2cpe 2026-06-01 10:12:02.244058
pkg:github/wpplugins/master-slider purl2cpe 2026-06-01 10:12:02.244060

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20368 vulnerable 2026-06-03 14:38:38.984689 Details available
The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback.
Published: 2018-12-23T02:00:00.000Z
Updated: 2024-09-17T04:04:49.966Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.