CVE-2024-6850
Severity:
MEDIUM
Type:
Unavailable / Other
Publication date:
13/09/2024
Last modified:
13/09/2024
Description
The Carousel Slider WordPress plugin before 2.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Impact
Base Score 3.x
4.80
Severity 3.x
MEDIUM