CVE-2024-11878

creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptpbzniu2b 2024-12-20 07:35:47+00:00| seen| https://infosec.exchange/users/cve/statuses/113683998121199882 2024-12-20 09:13:17+00:00| seen|...

CVE-2024-11878

The Category Post Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'category-post-slider' shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-11878

CVE-2024-11878 (Category Post Slider, WordPress) stores cross-site scripting via the plugin’s category-post-slider shortcode in all versions up to 1.4. It is an authenticated issue: attackers with Contributor+ (or higher) access can inject scripts that execute when users load a page containing th...

CVE-2024-11878 Category Post Slider <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Category Post Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'category-post-slider' shortcode in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...