Skip to content
OpenAdvisories

Product · binsaifullah

Awesome Logo Carousel Block

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.4

    Logo Carousel Gutenberg Block <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via sliderId Parameter

    The Logo Carousel Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sliderId’ parameter in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for…