CVE-2024-37954

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in marcelotorres Simple Responsive Slider allows Reflected XSS.This issue affects Simple Responsive Slider: from n/a through 0.2.2.5...

CVE-2024-37954 WordPress Simple Responsive Slider plugin <= 0.2.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in marcelotorres Simple Responsive Slider allows Reflected XSS.This issue affects Simple Responsive Slider: from n/a through 0.2.2.5...

CVE-2024-37954

CVE-2024-37954 is a reflected XSS in the WordPress plugin Simple Responsive Slider by Marcelotorres. Root cause: improper input neutralization during web page generation. Affected: Simple Responsive Slider for WordPress, from n/a through 0.2.2.5. The connected documents do not provide a confirmed...

CVE-2024-37954 WordPress Simple Responsive Slider plugin <= 0.2.2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in marcelotorres Simple Responsive Slider allows Reflected XSS.This issue affects Simple Responsive Slider: from n/a through 0.2.2.5...

CVE-2024-38750

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in digontoahsan Advanced post slider.This issue affects Advanced post slider: from n/a through 3.0.0...

CVE-2024-38686

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Pluginic FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor allows Stored XSS.This issue affects FancyPost – Best Ultimate Post Block, Post...

CVE-2024-38750 WordPress Advanced post slider plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in digontoahsan Advanced post slider.This issue affects Advanced post slider: from n/a through 3.0.0...

CVE-2024-38750 WordPress Advanced post slider plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in digontoahsan Advanced post slider.This issue affects Advanced post slider: from n/a through 3.0.0...

PT-2024-27860 · Unknown · Gutslider – All In One Block Slider

Name of the Vulnerable Software and Affected Versions: GutSlider – All in One Block Slider versions through 2.7.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which can be...

PT-2024-27859 · Unknown · Simple Responsive Slider

Name of the Vulnerable Software and Affected Versions: Simple Responsive Slider versions 0.2.2.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: Fo...

WordPress Advanced post slider plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Advanced post slider versions = 3.0.0...

WordPress Slider by 10Web plugin < 1.2.56 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Slider by 10Web versions 1.2.56...

CVE-2024-6026

The Slider by 10Web WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could allow authenticated users with access to the Sliders by default Administrator, however this can be changed via the Slider by 10Web WordPress plugin before 1.2.56's options and th...

CVE-2024-6026 Slider by 10Web < 1.2.56 - Editor+ Stored XSS

The Slider by 10Web WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could allow authenticated users with access to the Sliders by default Administrator, however this can be changed via the Slider by 10Web WordPress plugin before 1.2.56's options and th...

CVE-2024-6026

The CVE-2024-6026 issue affects the Slider by 10Web WordPress plugin prior to version 1.2.56. The vulnerability arises from insufficient sanitisation/escaping of certain Slide options, allowing authenticated users with access to the Sliders (default Administrator, configurable) who can add images...

CVE-2024-6026 Slider by 10Web < 1.2.56 - Editor+ Stored XSS

The Slider by 10Web WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could allow authenticated users with access to the Sliders by default Administrator, however this can be changed via the Slider by 10Web WordPress plugin before 1.2.56's options and th...

WordPress Advanced post slider Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Advanced post slider Type Plugin Vulnerable versions = 3.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38750 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID df5074d84975 Credits LVT-tholv2k Required privilege...

PT-2024-37329 · 10Web · Sliderby10Web Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Slider by 10Web WordPress plugin version 1.2.55 and earlier Description: The issue concerns the Slider by 10Web WordPress plugin, which does not properly sanitise and escape some of its Slide options. This could allow authenticated users...

WordPress plugin Slider by 10Web Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

WordPress Slider by 10Web Plugin < 1.2.56 is vulnerable to Cross Site Scripting (XSS)

Software Slider by 10Web Type Plugin Vulnerable versions 1.2.56 Fixed in 1.2.56 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6026 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f2d0a4740b24 Credits Dmitrii Ignatyev Require...