CVE Catalog
CVE-2026-39507
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.18%
7th percentile - higher than 7% of all known CVEs
Summary
Versions of Social Slider Feed up to 2.3.2 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious JavaScript code.
Risk Assessment
This vulnerability may lead to user data theft and session hijacking, posing a serious threat to the application's security and the organization's data.
Recommendation
It is recommended to update to the latest version of Social Slider Feed to mitigate this security vulnerability. Additionally, conduct an application audit to identify potential XSS attack vectors.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Social Slider Feed <= 2.3.2 versions.

