Description
The Carousel Slider WordPress plugin before 2.2.11 does not sanitise and escape some parameters, which could allow users with a role as low as editor to perform Cross-Site Scripting attacks
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Carousel Slider | < 2.2.11 | 2.2.11 |
References
- https://wpscan.com/vulnerability/13dcfd8a-e378-44b4-af6f-940bc41539a4/ exploit vdb-entry technical-description