Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-10896

Logo Slider < 4.5.0 - Contributor+ Stored XSS

Description

The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Logo Slider

Default version status: unaffected

  • 0 to < 4.5.0affected

References