CVE-2024-2949

CVE-2024-2949 affects the WordPress plugin Carousel, Slider, Gallery by WP Carousel (WP Carousel Free). It is a Stored XSS in the carousel widget (sp_wp_carousel_shortcode) present in all versions up to and including 2.6.3. Exploitation requires authenticated access at contributor level or higher...