Aller au contenu
Se connecter
3.5 Faible

CVE-2024-12173 The Master Slider WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow…

Description

The Master Slider WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Produits et versions touchés

Produit Versions touchées Corrigé en
Master Slider 3.10 premières → < 3.10.5 3.10.5

Autres CVE de Master Slider

Les 3 CVE de Master Slider →
CVE-2026-14844 The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes… 6.8 Moyenne CVE-2024-6490 During testing of the Master Slider WordPress plugin through 3.9.10, a CSRF vulnerability was found, which allows an… 6.5 Moyenne
Suivre cette CVE