CVE-2024-3703
Carousel Slider < 2.2.10 - Editor+ Stored XSS
MEDIUM 4.7EPSS 0.5%
The Carousel Slider WordPress plugin before 2.2.10 does not validate and escape some of its Slide options before outputting them back in the page/post where the related Slide shortcode is embed, which could allow users with the Editor role and above to perform Stored Cross-Site Scripting attacks
- Affected
- Carousel Slider
- CVSS v3.1 CNA
- 4.7 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N - EPSS
- 0.50% chance of exploitation in the next 30 days, 41st percentile
- Published
- 2024-05-03
- Updated
- 2024-11-29