CVE-2024-47631 WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Logo Carousel – Clients logo carousel for WP responsive-client-logo-carousel-slider allows Stored XSS.This issue affects Logo Carousel – Clients logo carousel for WP: from n/a through = 1....

CVE-2024-47631

CVE-2024-47631: Stored XSS in Logo Carousel – Clients logo carousel for WP (bPlugins LLC) affecting WP plugin versions up to 1.2. Root cause is improper neutralization of input during web page generation. The issue is categorized as a stored XSS with low to moderate impact per CVSS (6.5, CVSS v3....

WordPress plugin Logo Carousel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2024-32689 · WordPress · Logo Carousel

Name of the Vulnerable Software and Affected Versions: Logo Carousel – Clients logo carousel for WP versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, where ...

CVE-2024-8282

The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ attribute within the 'wp:ive/ive-productscarousel' Gutenberg block in all versions up to, and including, 1.2.4.4 due to insufficient input sanitization and output escaping. Thi...

WordPress plugin Ibtana 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...

PT-2024-38912 · WordPress · Ibtana

Name of the Vulnerable Software and Affected Versions: Ibtana – WordPress Website Builder plugin for WordPress versions up to, and including, 1.2.4.4 Description: The issue is related to Stored Cross-Site Scripting via the align attribute within the 'wp:ive/ive-productscarousel' Gutenberg block d...

WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Logo Carousel – Clients logo carousel for WP versions = 1.2...

WordPress Logo Carousel – Clients logo carousel for WP Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

Software Logo Carousel – Clients logo carousel for WP Type Plugin Vulnerable versions = 1.2 Fixed in 1.3.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47631 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID c59f3b8fd57a Credits Khalid Yusu...

WordPress Meta Slider and Carousel with Lightbox plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Robert DeVore Patchstack Alliance in WordPress Plugin Meta slider and carousel with lightbox versions = 2.0.1...

WordPress Meta slider and carousel with lightbox Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Meta slider and carousel with lightbox Type Plugin Vulnerable versions = 2.0.1 Fixed in 2.0.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47307 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID df52f890f463 Credits Robert DeVore...

CVE-2024-44048

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Product Carousel Slider & Grid Ultimate for WooCommerce woo-product-carousel-slider-and-grid-ultimate.This issue affects Product Carousel Slider & Grid Ultimate for...

CVE-2024-44048 WordPress Product Carousel Slider & Grid Ultimate for WooCommerce plugin <= 1.9.10 - Authenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Product Carousel Slider & Grid Ultimate for WooCommerce woo-product-carousel-slider-and-grid-ultimate.This issue affects Product Carousel Slider & Grid Ultimate for...

CVE-2024-44048

CVE-2024-44048 affects WordPress plugin Product Carousel Slider & Grid Ultimate for WooCommerce (wpWax) up to version 1.9.10. The vulnerability is an Authenticated Local File Inclusion due to improper restriction of pathnames (Path Traversal) that can be exploited by users with Contributor+ privi...

PT-2024-30915 · WordPress · Wpwax Product Carousel Slider & Grid Ultimate

Name of the Vulnerable Software and Affected Versions: wpWax Product Carousel Slider & Grid Ultimate for WooCommerce versions 1.9.10 and earlier Description: The issue is related to a Path Traversal vulnerability, which allows PHP Local File Inclusion. This vulnerability can be exploited by a...

Malicious code in bc-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3941632e7872e79a931f3a5f41f3fc042aab5864ebf162ea08ec70ebd5bc1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8939 Malicious code in bc-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3941632e7872e79a931f3a5f41f3fc042aab5864ebf162ea08ec70ebd5bc1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Product Carousel Slider & Grid Ultimate for WooCommerce plugin <= 1.9.10 - Authenticated Local File Inclusion vulnerability

Authenticated Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Product Carousel Slider & Grid Ultimate for WooCommerce versions = 1.9.10...

WordPress Product Carousel Slider & Grid Ultimate for WooCommerce Plugin <= 1.9.10 is vulnerable to Local File Inclusion

Software Product Carousel Slider & Grid Ultimate for WooCommerce Type Plugin Vulnerable versions = 1.9.10 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Local File Inclusion CVE CVE-2024-44048 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4798e7468b9b...

WordPress Carousel Slider plugin < 2.2.14 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Carousel Slider versions 2.2.14...