CVE-2018-20368

MEDIUM · CVSS 5.4 EPSS 0.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-12-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-20368

Severity

MEDIUM

CVSS

5.4

EPSS

0.70%

WordPress

Original NVD Description

The Master Slider plugin 3.2.7 and 3.5.1 for WordPress has XSS via the wp-admin/admin-ajax.php Name input field of the MSPanel.Settings value on Callback.