GS Plugins

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

GS Plugins records in CISA KEV

No GS Plugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gs Logo Slider 2 records MEDIUM Gs Pinterest Portfolio 2 records LOW Gs Testimonial Slider 2 records LOW Logo Slider 2 records MEDIUM Gs Books Showcase 1 record HIGH Gs Filterable Portfolio 1 record MEDIUM Gs Insever Portfolio 1 record MEDIUM Gs Portfolio For Envato 1 record MEDIUM

Records

2 records in Gs Logo Slider · all components

TI-2022-04225 CVE-2022-4624 · GHSA-gm54-wj7g-5mp3

GS Logo Slider < 3.3.8 - Contributor+ Stored XSS in Shortcode

MEDIUM 58

The GS Logo Slider WordPress plugin before 3.3.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-23 Fixed in 3.3.8

TI-2024-07153 CVE-2024-7716 · GHSA-6hvh-jp5m-5p5j

GS Logo Slider Lite < 3.6.9 - Admin+ Stored XSS

MEDIUM 55

The Logo Slider WordPress plugin before 3.6.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltere…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00352 Published 2024-09-11 Fixed in 3.6.9 CWE-79

Open these records in search →