Lucene search
WPScanCVELIST:CVE-2021-24729HistoryNov 23, 2021 - 7:16 p.m.
CVE-2021-24729 Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting
2021-11-2319:16:10
CWE-79
WPScan
www.cve.org
2
cve-2021-24729
logo showcase
slick slider
wordpress plugin
cross-site scripting
EPSS
0.001
Percentile
24.8%
The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata of Grid logo showcase.
CNA Affected
[
{
"product": "Logo Showcase with Slick Slider – Logo Carousel, Logo Slider & Logo Grid",
"vendor": "Unknown",
"versions": [
{
"lessThan": "1.2.4",
"status": "affected",
"version": "1.2.4",
"versionType": "custom"
}
]
}
]Related
prion
prion
Cross site scripting
2021-11-23 20:15:00
nvd
nvd
CVE-2021-24729
2021-11-23 20:15:09
wpexploit
wpexploit
wpvulndb
wpvulndb
patchstack
patchstack
cve
cve
CVE-2021-24729
2021-11-23 20:15:09