CVE-2023-5428

CVE-2023-5428 affects the WordPress plugin “Image vertical reel scroll slideshow” up to version 9.0. Root cause: insufficient escaping of user-supplied parameter and inadequate query preparation in the plugin shortcode, enabling authenticated users with subscriber-level+ to inject additional SQL ...

WordPress Image vertical reel scroll slideshow Plugin <= 9.0 is vulnerable to SQL Injection

Software Image vertical reel scroll slideshow Type Plugin Vulnerable versions = 9.0 Fixed in 9.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-5428 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 370354776dcc Credits István Márton Required privilege...

CVE-2023-45051 WordPress Image vertical reel scroll slideshow Plugin <= 9.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Gopi Ramasamy Image vertical reel scroll slideshow plugin = 9.0 versions...

WordPress Image vertical reel scroll slideshow Plugin <= 9.2 is vulnerable to Cross Site Scripting (XSS)

Software Image vertical reel scroll slideshow Type Plugin Vulnerable versions = 9.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45051 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 0b834e242a67 Credits yuyudh...