Post Slider And Post Carousel
1 CVEs
product
Monthly
The Post Slider and Post Carousel with Post Vertical Scrolling Widget WordPress plugin before 3.2.10 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
WordPress
XSS
Post Slider And Post Carousel
PHP
NVD
WPScan
CVSS 3.1
4.8
EPSS
0.1%
EPSS 0%
CVSS 4.8
MEDIUM
POC
PATCH
This Month
The Post Slider and Post Carousel with Post Vertical Scrolling Widget WordPress plugin before 3.2.10 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
WordPress
XSS
Post Slider And Post Carousel
+1
NVD
WPScan