Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sergey Panasenko Sponsors Carousel plugin <= 4.02 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sergey Panasenko | Sponsors Carousel | ≤ 4.02 | — |
Medium · 5.9
CVE-2023-23808
EUVD-2023-27894GHSA-f4fm-h9m4-mq5g
WordPress Sponsors Carousel Plugin <= 4.02 is vulnerable to Cross Site Scripting (XSS)
Published May 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack