CVE-2023-5428

CVE-2023-5428 affects the WordPress plugin “Image vertical reel scroll slideshow” up to version 9.0. Root cause: insufficient escaping of user-supplied parameter and inadequate query preparation in the plugin shortcode, enabling authenticated users with subscriber-level+ to inject additional SQL ...

CVE-2023-45051

CVE-2023-45051 is an Auth. (admin+) Stored XSS in the WordPress plugin “Image vertical reel scroll slideshow.” The vulnerability affects the plugin’s image slideshow function and is caused by insufficient escaping/validation of inputs, permitting stored XSS when an admin with unfiltered HTML cont...