CVE-2022-4664

The CVE-2022-4664 entry concerns the WordPress plugin Logo Slider (before 3.6.0). The vulnerability arises because the plugin does not validate and escape certain shortcode attributes before outputting them in a page/post, enabling Stored Cross-Site Scripting for users with the contributor role o...

CVE-2024-3288

CVE-2024-3288 affects the Logo Slider WordPress plugin (pre-4.0.0). The issue is that certain Slider Settings are not properly validated or escaped before being output in attributes, enabling Stored XSS for users with Contributor+ roles. Red Hat confirms the same description. Remediation per sour...

CVE-2024-12308

The Logo Slider WordPress plugin versions prior to 4.6.0 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to validate and escape certain shortcode attributes before they are outputted in a page or post where the shortcode is embedded. This allows users with contrib...

CVE-2024-10473

The Logo Slider WordPress plugin versions prior to 4.5.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The issue arises because the plugin fails to properly sanitize and escape certain Logo Settings when they are rendered on pages where the Logo Slider shortcode is embedded....

CVE-2024-5429

The Logo Slider WordPress plugin (versions before 4.1.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to validate and escape certain Slider Settings before they are output back into attributes. This allows users with Contributor roles or higher to perform XSS ...

CVE-2024-10896

The Logo Slider WordPress plugin versions prior to 4.5.0 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape specific Logo and Slider settings . This flaw allows users with high privileges, such as Contributors , to execute malicious ...