Today > | 1 Medium vulnerabilities - You can now download lists of IOCs here!

CVE-2024-3703

May 3, 2024, 12:48 p.m.

Product(s) Impacted

Carousel Slider WordPress plugin

before 2.2.10

Description

The Carousel Slider WordPress plugin before 2.2.10 does not validate and escape some of its Slide options before outputting them back in the page/post where the related Slide shortcode is embed, which could allow users with the Editor role and above to perform Stored Cross-Site Scripting attacks

Weaknesses

Date

Published: May 3, 2024, 6:15 a.m.

Last Modified: May 3, 2024, 12:48 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

References

https://wpscan.com/ contact@wpscan.com