CVE-2022-4482

The CVE-2022-4482 entry covers the WP Carousel (Carousel, Slider, Gallery) WordPress plugin before version 2.5.3. The vulnerability is a Stored XSS caused by insufficient validation and escaping of shortcode attributes, enabling a low-privilege user (contributor) to inject scripts that could affe...

CVE-2024-13314

The Carousel, Slider, Gallery by WP Carousel WordPress plugin (versions before 2.7.4 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings, which allows high-privilege users, such as administrators, to execute ...

CVE-2024-4002

The Carousel, Slider, Gallery by WP Carousel WordPress plugin, in versions prior to 2.6.9 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the lack of proper sanitization and escaping of certain plugin settings. This flaw could allow high-privilege users, such as administr...