Description (CNA)
WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carousel image selection feature. While logged in to the WordPress site with Carousel Slider plugin enabled, accessing a crafted page may cause a user to alter the contents of the WordPress site.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sayful Islam / Carousel Slider | affected prior to 2.0 |
CWE
No CWE identifiers supplied.
References
- https://github.com/sayful1/carousel-slider
- https://wordpress.org/plugins/carousel-slider/
- https://jvn.jp/en/jp/JVN25264194/
ADP enrichment
No English description supplied.
No references supplied.