Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24729

Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata of Grid logo showcase.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Logo Showcase with Slick Slider – Logo Carousel, Logo Slider & Logo Grid

  • 1.2.4 to < 1.2.4affected

References