CVE-2024-1730

🗓️ 20 Apr 2024 04:15:08Reported by [email protected]Type

The Prime Slider Addons For Elementor plugin for WordPress is vulnerable to stored cross-site scripting via URLs in link fields, images, and html tags used in widgets due to insufficient input sanitization and output escaping, allowing authenticated attackers to inject arbitrary web scripts in pages

Reporter	Title	Published	Views	Family All 12
CNNVD	WordPress Plugin Prime Slider 安全漏洞	20 Apr 202400:00	–	cnnvd
CVE	CVE-2024-1730	20 Apr 202403:21	–	cve
Cvelist	CVE-2024-1730 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting	20 Apr 202403:21	–	cvelist
EUVD	EUVD-2024-17458	3 Oct 202520:07	–	euvd
OSV	CVE-2024-1730	20 Apr 202404:15	–	osv
Patchstack	WordPress Prime Slider – Addons For Elementor Plugin <= 3.14.0 is vulnerable to Cross Site Scripting (XSS)	22 Apr 202400:00	–	patchstack
Patchstack	WordPress Prime Slider plugin <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability	22 Apr 202402:02	–	patchstack
Positive Technologies	PT-2024-18258 · WordPress · The Prime Slider – Addons For Elementor	20 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-1730	23 May 202510:18	–	redhatcve
Vulnrichment	CVE-2024-1730 Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting	20 Apr 202403:21	–	vulnrichment