CVE-2026-56014

Name of the Vulnerable Software and Affected Versions Master Slider versions prior to 3.11.3

Description An unauthenticated cross-site scripting (XSS) flaw exists in the web-facing input handling. The issue stems from improper input validation and output encoding, which allows attacker-supplied content to be rendered as an active script in the browser. A remote attacker can inject malicious payloads into exposed parameters or fields without authentication. If an administrator or user interacts with the crafted content, it can lead to session hijacking, admin account takeover via stolen cookies or nonces, and malicious redirects.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.