CVE-2023-0589

The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2023-0589 WP Image Carousel <= 1.0.2 - Contributor+ Stored XSS

The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2023-0589

The CVE-2023-0589 entry concerns WP Image Carousel (WordPress)

CVE-2023-0589: Undefined Security Weakness

The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

PT-2023-16387

Name of the Vulnerable Software and Affected Versions WP Image Carousel WordPress plugin versions 1.0.2 and earlier Description The issue allows users with a role as low as contributor to perform Cross-Site Scripting attacks due to the plugin not sanitising and escaping some parameters...

WP Image Carousel <= 1.0.2 - Contributor+ Stored XSS

The plugin does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks. 1. Go to the plugin settings and insert all the settings, then save. 2. Insert the following shortcode in a post/page: wpic speed='""; alert1...