Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta Master Slider master-slider allows Stored XSS.This issue affects Master Slider: from n/a t…

Medium CVSS 6.5

CVECVE-2025-58025

First seen2026-10-11 23:15 UTC

Disclosed2025-09-22 19:16 UTC

Last updated2026-10-11 23:15 UTC

Channel statusauto

Summary

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in averta Master Slider master-slider allows Stored XSS.This issue affects Master Slider: from n/a through <= 3.11.0.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://patchstack.com/database/Wordpress/Plugin/master-slider/vulnerability/wordpress-master-slider-plugin-3-11-0-cross-site-scripting-xss-vulnerability?_s_id=cve Third Party Advisory

Timeline

2026-10-11 nvd_ingest NVD