WordPress plugin Slider comparison image before and after 跨站脚本漏洞

🗓️ 10 Sep 2024 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Stored cross-site scripting in the Slider comparison image plugin prior to version 0.8.3 due to the sciba function.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-8543	10 Sep 202413:23	–	circl
CVE	CVE-2024-8543	10 Sep 202409:30	–	cve
Cvelist	CVE-2024-8543 Slider comparison image before and after <= 0.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting	10 Sep 202409:30	–	cvelist
EUVD	EUVD-2024-49251	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8543	10 Sep 202410:15	–	nvd
Patchstack	WordPress Slider comparison image before and after plugin <= 0.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability	10 Sep 202401:21	–	patchstack
Patchstack	WordPress Slider comparison image before and after Plugin <= 0.8.3 is vulnerable to Cross Site Scripting (XSS)	10 Sep 202400:00	–	patchstack
Positive Technologies	PT-2024-39083 · WordPress · Slider Comparison Image Before/After	10 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8543	23 May 202510:32	–	redhatcve
Vulnrichment	CVE-2024-8543 Slider comparison image before and after <= 0.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting	10 Sep 202409:30	–	vulnrichment

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/14ab5d7c-ab46-4a53-b0d2-8b331e204cf3
plugins	www.plugins.trac.wordpress.org/browser/slider-comparison-image-before-and-after/trunk/sciba.php
cxsecurity	www.cxsecurity.com/cveshow/CVE-2024-8543/

31 Dec 2025 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.4 - 6.4

EPSS0.00218

SSVC

cross site scripting slider plugin vulnerable versions version 0.8.3