Beveiligingsadvies

CVE-2024-3703

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-03 06:00:02

Laatst bijgewerkt 2024-11-29 15:40:28

Toegewezen door WPScan

CVSS-score 4.7

Status PUBLISHED

Beschrijving

The Carousel Slider WordPress plugin before 2.2.10 does not validate and escape some of its Slide options before outputting them back in the page/post where the related Slide shortcode is embed, which could allow users with the Editor role and above to perform Stored Cross-Site Scripting attacks

← Alle CVE's bekijken Bekijk op cve.org ↗