Missing Authorization in Smart Slider 3 Image AJAX Controller
Three AJAX actions in the image controller ran without checking the caller’s Smart Slider permissions, so any authenticated user at contributor level could edit and delete slider images. Each action now validates the corresponding smartslider_edit or smartslider_delete permission before doing any work.
This vulnerability affects the following application versions:
- Smart Slider 3 3.4.1.6
- Smart Slider 3 3.4.1.7
- Smart Slider 3 3.4.1.8
- Smart Slider 3 3.4.1.9
- Smart Slider 3 3.4.1.10
- Smart Slider 3 3.4.1.11
- Smart Slider 3 3.4.1.12
- Smart Slider 3 3.4.1.13
- Smart Slider 3 3.4.1.14
- Smart Slider 3 3.4.1.15
- Smart Slider 3 3.4.1.16
- Smart Slider 3 3.4.1.17
- Smart Slider 3 3.5.0.8
- Smart Slider 3 3.5.0.9
- Smart Slider 3 3.5.0.10
- Smart Slider 3 3.5.0.11
- Smart Slider 3 3.5.1.0
- Smart Slider 3 3.5.1.1
- Smart Slider 3 3.5.1.2
- Smart Slider 3 3.5.1.3
- Smart Slider 3 3.5.1.4
- Smart Slider 3 3.5.1.7
- Smart Slider 3 3.5.1.9
- Smart Slider 3 3.5.1.11
- Smart Slider 3 3.5.1.12
- Smart Slider 3 3.5.1.13
- Smart Slider 3 3.5.1.14
- Smart Slider 3 3.5.1.15
- Smart Slider 3 3.5.1.16
- Smart Slider 3 3.5.1.17
- Smart Slider 3 3.5.1.18
- Smart Slider 3 3.5.1.19
- Smart Slider 3 3.5.1.21
- Smart Slider 3 3.5.1.23
- Smart Slider 3 3.5.1.24
- Smart Slider 3 3.5.1.25
- Smart Slider 3 3.5.1.26
- Smart Slider 3 3.5.1.27
- Smart Slider 3 3.5.1.28
- Smart Slider 3 3.5.1.29
- Smart Slider 3 3.5.1.30
- Smart Slider 3 3.5.1.31
- Smart Slider 3 3.5.1.32