6 matches found
CVE-2024-12308
The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-12308
creationtimestamp| type| source ---|---|--- 2025-02-24 06:22:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5130 2025-02-24 07:55:31+00:00| seen| https://t.me/cvedetector/18782 2025-02-24 08:37:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3livx2eqxhg23 2025-02-24...
CVE-2024-12308
The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-12308 Logo Slider < 4.6.0 - Contributor+ Stored XSS
The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-12308 Logo Slider < 4.6.0 - Contributor+ Stored XSS
The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-12308
The Logo Slider WordPress plugin versions prior to 4.6.0 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to validate and escape certain shortcode attributes before they are outputted in a page or post where the shortcode is embedded. This allows users with contrib...