Security Advisory

CVE-2024-22286

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-31 17:52:07
Last updated 2026-04-28 16:09:09
Assigner Patchstack
State PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in Aluka BA Plus – Before & After Image Slider FREE allows Reflected XSS.This issue affects BA Plus – Before & After Image Slider FREE: from n/a through 1.0.3.