3 matches found
CVE-2023-24413: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution WordPress vertical image slider plugin = 1.2.16 versions...
CVE-2023-2289: Improper Neutralization of Input During Web Page Generation
The wordpress vertical image slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘searchterm’ parameter in versions up to, and including, 1.2.16 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...
PT-2023-18753
Name of the Vulnerable Software and Affected Versions wordpress vertical image slider plugin versions up to, and including, 1.2.16 Description The issue allows unauthenticated attackers to inject arbitrary web scripts in pages due to insufficient input sanitization and output escaping via the...