CVE-2026-115961
MediumCVSS 6.5Summary
The B Slider plugin (through 2.2.2) contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. Malicious code can be stored and executed in a user's browser.
Risk Assessment
An attacker can store a script that executes in the session of an administrator or users, potentially leading to session hijacking or data modification. This affects the security of the WordPress site.
Recommendation
Update the B Slider plugin to a version later than 2.2.2. Consider additional input filtering and CSP deployment.
Other vulnerabilities in B Slider
Original NVD description (English source)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Slider b-slider allows Stored XSS.This issue affects B Slider: from n/a through 2.2.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS