CVE-2026-56014

HighCVSS 7.1

Published: 25/06/2026(UTC)Updated: 26/06/2026(UTC)Translated: 27/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile — higher than 7% of all known CVEs

Summary

The Master Slider plugin versions up to 3.11.2 contain an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious JavaScript code without authentication.

Risk Assessment

An attacker can steal user sessions, redirect users to malicious sites, or perform other actions in their context, leading to confidentiality and integrity breaches.

Recommendation

Immediately update the Master Slider plugin to version 3.11.3 or later, which fixes this vulnerability.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Master Slider <= 3.11.2 versions.