← CVE Intelligence

CVE-2024-6026

Slider by 10Web < 1.2.56 - Editor+ Stored XSS PUBLISHED

Description (CNA)

The Slider by 10Web WordPress plugin before 1.2.56 does not sanitise and escape some of its Slide options, which could allow authenticated users with access to the Sliders (by default Administrator, however this can be changed via the Slider by 10Web WordPress plugin before 1.2.56's options) and the ability to add images (Editor+) to perform Stored Cross-Site Scripting attacks

Affected (CNA)

Vendor / productVersions
Unknown / Slider by 10Web affected 0 before 1.2.56

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.