nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-47922 CVE-2021-47922
MEDIUM
WordPress Plugin Slider by Soliloquy 2.6.2 Stored XSS
Record summary
CVE-2021-47922 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.
Description
Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of users viewing the slider on both administrative and frontend pages.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated May 11, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Slider by SoliloquyBrowse Soliloquywp / Slider by Soliloquy | CVE List | 2.6.2 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin Slider by Soliloquy 2.6.2 - 'title' Stored Cross Site Scripting (XSS) (Authenticated)ExploitDB exploitby Abdurrahman ErkanNot analyzed1 file
References
5Official Product Homepageproduct
https://soliloquywp.com/ Product Referenceproduct
https://wordpress.org/plugins/soliloquy-lite ExploitDB-50563exploit
https://www.exploit-db.com/exploits/50563 VulnCheck Advisory: WordPress Plugin Slider by Soliloquy 2.6.2 Stored XSSThird-party advisory
https://www.vulncheck.com/advisories/wordpress-plugin-slider-by-soliloquy-stored-xss