CVE-2022-33943

Authenticated (contributor or higher user role) Cross-Site Scripting (XSS) vulnerability in Nico Amarilla's BxSlider WP plugin <= 2.0.0 at WordPress.

Score

CVSS 3.1 5.4 Medium

Status

Modified - audit@patchstack.com

Published

2022-07-27

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Bxslider Wp (Bxslider Wp Project)
• Bxslider Wp Wordpress Plugin (Nico Amarilla)

References

• https://patchstack.com/database/vulnerability/bxslider-wp/wordpress-bxslider-wp-plugin-2-0-0-authenticated-cross-site-s…
• https://wordpress.org/plugins/bxslider-wp/#developers