5.4
Moyenne
CVE-2023-0589 The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow…
Description
The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Image Carousel 1.0 | premières → 1.0.2 | Pas de correctif indiqué |