CVE-2023-2120

CVE-2023-2120 affects the WordPress plugin Thumbnail carousel slider (WP-responsive-thumbnail-slider) up to version 1.1.9. The root cause is insufficient input sanitization and output escaping for the search_term parameter, enabling Reflected Cross-Site Scripting. It requires user interaction (th...