Lucene search
+L

173 matches found

NVD
NVD
added 2025/04/01 9:15 p.m.15 views

CVE-2025-31571

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...

7.1CVSS0.00294EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 8:58 p.m.58 views

CVE-2025-31571

CVE-2025-31571 involves a reflected Cross-Site Scripting vulnerability in The Logo Slider WordPress plugin. Affected software: The Logo Slider (vulnerable up to 1.0.0). Root cause: improper neutralization of input during web page generation. Impact: potential for an attacker to execute scripts in...

7.1CVSS7.2AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 8:58 p.m.22 views

CVE-2025-31571 WordPress The Logo Slider plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...

7.1CVSS0.00294EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/01 7:36 a.m.7 views

WordPress The Logo Slider plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Abdi Pranata in WordPress Plugin The Logo Slider versions = 1.0.0...

7.1CVSS6.9AI score0.00294EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/01 12:00 a.m.10 views

PT-2025-14431 · Unknown · The Logo Slider

Name of the Vulnerable Software and Affected Versions: The Logo Slider versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in The Logo Slider. Recommendations...

7.1CVSS7.1AI score0.00294EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.6 views

WordPress plugin The Logo Slider 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.8AI score0.00294EPSS
SaveExploits0References2
NVD
NVD
added 2025/03/18 7:15 a.m.26 views

CVE-2025-2262

The The Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.7.3. This is due to the software allowing users to execute an action that does not properly...

7.3CVSS0.00464EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/03/18 6:36 a.m.27 views

CVE-2025-2262 Logo Slider <= 3.7.3 - Unauthenticated Arbitrary Shortcode Execution

The The Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.7.3. This is due to the software allowing users to execute an action that does not properly...

7.3CVSS0.00464EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/03/18 6:36 a.m.11 views

CVE-2025-2262 Logo Slider <= 3.7.3 - Unauthenticated Arbitrary Shortcode Execution

The The Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.7.3. This is due to the software allowing users to execute an action that does not properly...

7.3CVSS7.6AI score0.00464EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/03/18 12:00 a.m.11 views

WordPress plugin Logo Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.3CVSS9.2AI score0.00464EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2025/03/17 6:58 p.m.9 views

WordPress Logo Slider plugin <= 3.7.3 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by mikemyers in WordPress Plugin GS Logo Slider versions = 3.7.3...

7.3CVSS8.9AI score0.00464EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/26 6:26 a.m.15 views

CVE-2024-12308

The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.5AI score0.00281EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2025/02/24 10:28 p.m.10 views

WordPress Logo Slider plugin < 4.6.0 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Logo Slider versions 4.6.0...

5.4CVSS6.1AI score0.00281EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2025/02/24 6:15 a.m.7 views

CVE-2024-12308

The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS5.8AI score0.00281EPSS
SaveExploits1References1
NVD
NVD
added 2025/02/24 6:15 a.m.17 views

CVE-2024-12308

The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS0.00281EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/02/24 6:00 a.m.9 views

CVE-2024-12308 Logo Slider < 4.6.0 - Contributor+ Stored XSS

The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

6AI score0.00281EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/02/24 12:00 a.m.8 views

WordPress plugin Logo Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.3AI score0.00281EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2024/11/29 3:28 a.m.8 views

WordPress Logo Slider plugin < 4.5.0 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Logo Slider versions 4.5.0...

5.4CVSS6.1AI score0.0037EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
added 2024/11/29 3:15 a.m.7 views

WordPress Logo Slider plugin < 4.5.0 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Logo Slider versions 4.5.0...

5.4CVSS6.1AI score0.0037EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2024/11/28 6:15 a.m.7 views

CVE-2024-10896

The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting...

5.4CVSS5.8AI score0.0037EPSS
SaveExploits1References1
Rows per page
Query Builder