CVE Catalog

CVE-2026-39507

HighCVSS 7.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

7th percentile - higher than 7% of all known CVEs

Summary

Versions of Social Slider Feed up to 2.3.2 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious JavaScript code.

Risk Assessment

This vulnerability may lead to user data theft and session hijacking, posing a serious threat to the application's security and the organization's data.

Recommendation

It is recommended to update to the latest version of Social Slider Feed to mitigate this security vulnerability. Additionally, conduct an application audit to identify potential XSS attack vectors.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Social Slider Feed <= 2.3.2 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS