CVE-2026-111111

{
  "etk_id": "ETK-2026-2852",
  "cve_id": "CVE-2026-111111",
  "display_id": "CVE-2026-111111",
  "ghsa_id": "GHSA-986p-52gw-j792",
  "euvd_id": "EUVD-2026-111599",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Stored cross-site scripting in Prime Slider for WordPress",
  "summary": "Prime Slider for WordPress versions through 4.7.2 can store unsafe content supplied through its comment parameter. An unauthenticated attacker may cause script to run in the browsers of users who later view affected content; the attacker must be able to submit input to the exposed functionality.",
  "mitigation": "Disable the plugin if it is not required, or restrict public access to functionality that accepts the affected input. Upgrade to a vendor release newer than 4.7.2 after confirming it addresses this issue.",
  "vendor": "bdthemes",
  "product": "Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 4.7.2"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 34.57059923333333,
  "t0_at": "2026-10-28T06:45:15.943000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-28T10:38:51.145840+00:00",
      "days": 0.16221299583333335,
      "is_lower_bound": false,
      "measured_at": "2026-10-28T06:45:15.943000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-28T06:45:15.943000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-28T06:45:15.943000+00:00",
      "url": "https://github.com/advisories/GHSA-986p-52gw-j792"
    }
  }
}