WordPress Yoo Slider Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Yoo Slider Type Plugin Vulnerable versions = 2.1.1 Fixed in 2.2.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31106 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7632355b4c8e Credits Dimas Maulana Required privilege...

PT-2024-23376 · Supsystic · Supsystic Slider

Name of the Vulnerable Software and Affected Versions: Supsystic Slider by Supsystic versions 1.8.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means that an...

CVE-2024-30237

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Supsystic Slider by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.10...

CVE-2024-30237

Summary of CVE-2024-30237 (WordPress Slider by Supsystic) : Affects the Supsystic Slider plugin for WordPress, versions up to 1.8.10. Root cause: improper neutralization of special elements in an SQL statement, resulting in an SQL Injection vulnerability. Impact/publication details from connected...

WordPress Creative Image Slider – Responsive Slider Plugin Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Creative Image Slider – Responsive Slider Plugin Type Plugin Vulnerable versions = 2.1.3 Fixed in 2.5.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30447 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7179e9a63a2b Credits...

WordPress GS Testimonial Slider Plugin <= 3.1.4 is vulnerable to Cross Site Scripting (XSS)

Software GS Testimonial Slider Type Plugin Vulnerable versions = 3.1.4 Fixed in 3.1.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30443 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1861dbb8a0e2 Credits LVT-tholv2k Required privilege...

PT-2024-18367 · WordPress · The Lightbox Slider – Responsive Lightbox Gallery

Name of the Vulnerable Software and Affected Versions: The Lightbox slider – Responsive Lightbox Gallery plugin for WordPress versions up to, and including, 1.9.9 Description: The issue is related to PHP Object Injection via deserialization of untrusted input through post meta data. This allows...

WordPress Plugin Slider by Supsystic SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress B Slider - Slider for your block editor Plugin <= 1.1.15 is vulnerable to Cross Site Scripting (XSS)

Software B Slider - Slider for your block editor Type Plugin Vulnerable versions = 1.1.15 Fixed in 1.1.16 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30432 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 0e9fb06ed18e Credits Jean Tirstan...

WordPress Slider by Supsystic Plugin <= 1.8.10 is vulnerable to Cross Site Scripting (XSS)

Software Slider by Supsystic Type Plugin Vulnerable versions = 1.8.10 Fixed in 1.8.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30448 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 1952fe12be85 Credits Jean Tirstan T Required privileg...

CVE-2024-30186

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1...

CVE-2024-30186

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1...

CVE-2024-30186 WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1...

CVE-2024-30186 WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1...

CVE-2024-29922

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quantum Cloud Slider Hero allows Stored XSS.This issue affects Slider Hero: from n/a through 8.6.1...

CVE-2024-29925

Technical details about CVE-2024-29925 (affected product/version, root cause, impact, and fix) are not provided in the supplied documents; monitor for updates.

CVE-2024-29922 WordPress Slider Hero plugin <= 8.6.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quantum Cloud Slider Hero allows Stored XSS.This issue affects Slider Hero: from n/a through 8.6.1...

CVE-2024-29922

CVE-2024-29922: Affected product is the Slider Hero WordPress plugin (Quantum Cloud Slider Hero). The issue is a Stored XSS caused by improper neutralization of input during web page generation, enabling injected scripts to persist in pages generated by Slider Hero (vulnerable up to 8.6.1). The c...

CVE-2024-29922 WordPress Slider Hero plugin <= 8.6.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Quantum Cloud Slider Hero allows Stored XSS.This issue affects Slider Hero: from n/a through 8.6.1...

WordPress Plugin Slider Hero 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...