CVE-2024-6408

The Slider by 10Web WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 1.2.57 . The root cause is the lack of proper sanitization and escaping of the Slider Title field. This flaw allows high-privilege users, such as editors and above , to perform XSS attacks...