CVE-2024-13331

The WP Dream Carousel WordPress plugin (versions 1.0.1b and earlier ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the lack of proper sanitization and escaping of a parameter before it is outputted back onto the page. An attacker can exploit this by tricking a h...