Lucene search

CVE-2024-4575 LayerSlider 7.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ls_search_form Shortcode

🗓️ 23 May 2024 11:37:02Reported by WordfenceType

LayerSlider WordPress plugin 7.11.0 Stored XSS via ls_search_form Shortcod

Reporter	Title	Published	Views	Family All 6
Patchstack	WordPress LayerSlider Plugin 7.11.0 is vulnerable to Cross Site Scripting (XSS)	24 May 202400:00	–	patchstack
Vulnrichment	CVE-2024-4575 LayerSlider 7.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ls_search_form Shortcode	23 May 202411:02	–	vulnrichment
WPVulnDB	LayerSlider 7.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ls_search_form Shortcode	22 May 202400:00	–	wpvulndb
CVE	CVE-2024-4575	23 May 202411:15	–	cve
NVD	CVE-2024-4575	23 May 202411:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024)	30 May 202415:23	–	wordfence

[
  {
    "vendor": "LayerSlider",
    "product": "LayerSlider",
    "versions": [
      {
        "version": "7.11.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/4fa4167a-686f-4fd0-a53d-eb61d57228a1
layerslider	www.layerslider.com/release-log/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 May 2024 11:02Current

6Medium risk

Vulners AI Score6

CVSS36.4

EPSS0.00043

layerslider[cve-2024-4575]wordpress[stored xss]ls_search_form[input sanitization]output escaping[authenticated]cross-site scripting[contributor]vulnerability.