CVE-2016-10974
HIGHfluid-responsive-slideshow < 2.2.7 - Cross-Site Request Forgery and Stored Cross-Site Scripting via frs_save
Title source: llmDescription
The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS.
References (2)
Core 2
Core References
Product x_refsource_misc
https://wordpress.org/plugins/fluid-responsive-slideshow/#developers
Exploit, Third Party Advisory x_refsource_misc
https://klikki.fi/adv/fluid_responsive_slideshow.html
Scores
CVSS v3
8.8
EPSS
0.0073
EPSS Percentile
49.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-352
Status
published
Products (1)
tonjoostudio/fluid-responsive-slideshow
< 2.2.7
Published
Sep 17, 2019
Tracked Since
Feb 18, 2026