EUVD-2021-11650

Malware in sbrugna...

CVE-2021-24738: Improper Neutralization of Input During Web Page Generation

The Logo Carousel WordPress plugin before 3.4.2 does not validate and escape the "Logo Margin" carousel option, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

PT-2021-16239

Name of the Vulnerable Software and Affected Versions: Logo Carousel WordPress plugin versions prior to 3.4.2 Description: The issue concerns the Logo Carousel WordPress plugin, where the Logo Margin carousel option is not properly validated and escaped. This could allow users with a role as low ...