6 matches found
CVE-2024-12308
The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-12308
creationtimestamp| type| source ---|---|--- 2025-02-24 06:22:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5130 2025-02-24 07:55:31+00:00| seen| https://t.me/cvedetector/18782 2025-02-24 08:37:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3livx2eqxhg23 2025-02-24...
CVE-2024-12308
The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-12308 Logo Slider < 4.6.0 - Contributor+ Stored XSS
The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-12308 Logo Slider < 4.6.0 - Contributor+ Stored XSS
The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-12308
CVE-2024-12308 — The Logo Slider WordPress plugin (Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider) prior to version 4.6.0 does not validate or escape certain shortcode attributes before output, enabling a Stored XSS vulnerability for users with the Contributor role or higher when...