nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-6408 CVE-2024-6408
MEDIUM
Slider by 10Web < 1.2.57 - Editor+ Stored XSS
Record summary
CVE-2024-6408 has a selected CVSS score of 5.4 (medium).
Description
The Slider by 10Web WordPress plugin before 1.2.57 does not sanitise and escape its Slider Title, which could allow high privilege users such as editors and above to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 31, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
sliderBrowse 10web / sliderDefault status: unknown | CVE List | Before 1.2.57 | affected |
Slider by 10WebDefault status: unaffected | CVE List | Before 1.2.57 | affected |
References
2wpscan.comexploitvdb entryTechnical description
https://wpscan.com/vulnerability/31aaeffb-a752-4941-9d0f-1b374fbc7abb