Lucene search

K
nvd[email protected]NVD:CVE-2024-4372
HistoryMay 21, 2024 - 6:15 a.m.

CVE-2024-4372

2024-05-2106:15:10
web.nvd.nist.gov
2
carousel slider
cross-site scripting
wordpress plugin
parameter sanitization
editor role

AI Score

8.7

Confidence

High

EPSS

0

Percentile

9.0%

The Carousel Slider WordPress plugin before 2.2.11 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks

AI Score

8.7

Confidence

High

EPSS

0

Percentile

9.0%