Medium severity4.8NVD Advisory· Published Sep 26, 2022· Updated Jun 17, 2026

CVE-2022-3074

Description

The Slider Hero WordPress plugin before 8.4.4 does not escape the slider Name, which could allow high-privileged users to perform Cross-Site Scripting attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Quantumcloud/Slider Hero
cpe:2.3:a:quantumcloud:slider_hero:*:*:*:*:*:wordpress:*:*
Range: <8.4.4
WordPress/Slider Herocpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <8.4.4
Package: https://wordpress.org/plugins/slider-hero

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/90ebaedc-89df-413f-b22e-753d4dd5e1c3nvdExploitPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000