CVE-2023-28499

WordPress Slide Anything Plugin <= 2.4.9 is vulnerable to Cross Site Scripting (XSS)

Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in simonpedge Slide Anything – Responsive Content / HTML Slider and Carousel plugin <= 2.4.9 versions.

We have discovered 13,087 live websites that are affected by CVE-2023-28499.

Test my site



Affected Software

Product  Slide Anything
Category Wordpress Plugins
Vulnerable Domains13,087 live websites (82.85% of Slide Anything install base)
Vulnerable Versions
  • from 0 through 2.4.9
Vulnerable Versions Count4 versions ( 66.67% of all versions)


Common Weakness Enumeration

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')



Details

  • Published - Nov 7, 2023
  • Updated - Aug 2, 2024

Credits

  • FearZzZz (Patchstack Alliance) (finder)

CVE-2023-28499 usage by Country

United States5,201 websites


Germany1,402 websites
France685 websites
GB603 websites
Russia478 websites
Poland446 websites
Netherlands316 websites
Australia259 websites
Italy249 websites
Cyprus230 websites

CVE-2023-28499 usage by TLD

.com5,658 websites
.de652 websites
.org600 websites
.co.uk481 websites
.ru386 websites
.com.au357 websites
.pl349 websites
.nl291 websites
.fr253 websites
.net250 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2023-28499

Top websites that are affected by CVE-2023-28499. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***********.org United States*,***
******************.de Germany**,***
**********.com GB**,***
**************.com United States**,***
***********.de Germany**,***
**************.org United States**,***
**************.ru Russia***,***
***********.com United States***,***
********.ca Canada***,***
***********.***.uk GB***,***
See full domain list

FAQ

CVE-2023-28499 is Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Slide Anything
A total of 13,087 websites have been identified as vulnerable to CVE-2023-28499, discovered through global website indexing conducted by WebTechSurvey.
Slide Anything is susceptible to CVE-2023-28499 vulnerability.
Slide Anything versions before, and including, 2.4.9 are vulnerable to CVE-2023-28499.