OWL Carousel Slider - Cross-Site Scripting

OWL Carousel Slider WordPress plugin v2.2 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craft malicious URL. id: CVE-2024-13627 info:...

CVE-2024-13627

The OWL Carousel Slider WordPress plugin through 2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13627

creationtimestamp| type| source ---|---|--- 2025-02-17 06:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lie3uddor72g 2025-02-17 06:17:43+00:00| seen| https://infosec.exchange/users/cve/statuses/114017767473909832 2025-02-17 08:10:54+00:00| seen|...

CVE-2024-13627

The OWL Carousel Slider WordPress plugin through 2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13627

The OWL Carousel Slider WordPress plugin (versions 2.2 and earlier ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitise and escape a parameter before it is outputted back onto the page. This allows an attacker to craft a malicious URL ...