Skip to content
Sign in
6.1 Medium

CVE-2024-5729 The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it…

Description

The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Affected products and versions

Product Affected versions Fixed in
Simple AL Slider 1.2 earliest → 1.2.10 No fix stated
simple_al_slider 1.2 earliest → 1.2.10 No fix stated
Track this CVE