CVE-2024-35778

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John West Slideshow SE PHP Local File Inclusion.This issue affects Slideshow SE: from n/a through 2.5.17...

CVE-2024-35778

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John West Slideshow SE PHP Local File Inclusion.This issue affects Slideshow SE: from n/a through 2.5.17...

CVE-2024-35778 WordPress Slideshow SE plugin <= 2.5.17 - Auth. Limited Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John West Slideshow SE PHP Local File Inclusion.This issue affects Slideshow SE: from n/a through 2.5.17...

CVE-2024-35778 WordPress Slideshow SE plugin <= 2.5.17 - Auth. Limited Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John West Slideshow SE PHP Local File Inclusion.This issue affects Slideshow SE: from n/a through 2.5.17...

CVE-2024-35778

CVE-2024-35778 corresponds to a Path Traversal (Local File Inclusion) affecting Slideshow SE for WordPress, through version 2.5.17. The vulnerability is described as an Authenticated (Author+) LFI with path traversal in PHP. The Wordfence vulnerability listing for Slideshow SE indicates the issue...

CVE-2024-35769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in John West Slideshow SE allows Stored XSS.This issue affects Slideshow SE: from n/a through 2.5.17...

CVE-2024-35769

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in John West Slideshow SE allows Stored XSS.This issue affects Slideshow SE: from n/a through 2.5.17...

CVE-2024-35769 WordPress Slideshow SE plugin <= 2.5.20 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in John West Slideshow SE slideshow-se allows DOM-Based XSS.This issue affects Slideshow SE: from n/a through = 2.5.20...

CVE-2024-35769 WordPress Slideshow SE plugin <= 2.5.17 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in John West Slideshow SE allows Stored XSS.This issue affects Slideshow SE: from n/a through 2.5.17...

WordPress plugin Slideshow SE cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-26733 · Unknown · Sh Slideshow

Name of the Vulnerable Software and Affected Versions: Slideshow SE versions 2.5.17 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability, in the PHP Local File Inclusion of Slideshow SE. This...

WordPress plugin Slideshow SE path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

WordPress Slideshow SE plugin <= 2.5.17 - Author+ Limited Local File Inclusion vulnerability

Author+ Limited Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Slideshow SE versions = 2.5.17...

WordPress Slideshow SE Plugin <= 2.5.17 is vulnerable to Local File Inclusion

Software Slideshow SE Type Plugin Vulnerable versions = 2.5.17 Fixed in 2.5.18 OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-35778 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7958c856162d Credits João Pedro S Alcântara Kinorth...

WordPress Slideshow SE plugin <= 2.5.20 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Slideshow SE versions = 2.5.20...

WordPress Slideshow SE Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)

Software Slideshow SE Type Plugin Vulnerable versions = 2.5.20 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35769 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5064bdc28526 Credits Steven Julian Required privilege Author...

CVE-2024-5543 Slideshow Gallery LITE <= 1.8.1 - Authenticated (Contributor+) SQL Injection

The Slideshow Gallery LITE plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in all versions up to, and including, 1.8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possib...

Wordpress Slideshow Gallery LITE plugin <= 1.8.1 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Krzysztof Zając in WordPress Plugin Left right image slideshow gallery versions = 1.8.1...

WordPress Left right image slideshow gallery Plugin <= 1.8.1 is vulnerable to SQL Injection

Software Left right image slideshow gallery Type Plugin Vulnerable versions = 1.8.1 Fixed in 1.8.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-5543 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 26f19037ceb8 Credits Krzysztof Zając Required...

CVE-2024-35722

Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0...