Read the docs

infornweb

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

infornweb records in CISA KEV

No infornweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Logo Showcase With Slick Slider 3 records LOW News & Blog Designer Pack 2 records MEDIUM Post Slider And Post Carousel 1 record MEDIUM Posts List Designer 1 record MEDIUM Posts List Designer By Category 1 record LOW

Records

3 records in Logo Showcase With Slick Slider · all components

TI-2021-07011 CVE-2021-24729 · GHSA-vq3m-v9x8-5263

Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting

Priority LOW 25

The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-11-23 Fixed in 1.2.4 CWE-79
TI-2021-07193 CVE-2021-24913 · GHSA-8mhg-23wr-jvpx

Logo Showcase with Slick Slider < 2.0.1 - Arbitrary Media Title/Description/Alt Text/URL Update via CSRF

Priority LOW 20

The Logo Showcase with Slick Slider WordPress plugin before 2.0.1 does not have CSRF check in the lswss_save_attachment_data AJAX action, allowing attackers to make a logged in high privilege user, change title, descript…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00471 Published 2022-02-28 Fixed in 2.0.1 CWE-352
TI-2021-07012 CVE-2021-24730 · GHSA-fm23-hrfg-rmqx

Logo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Update

Priority LOW 20

The Logo Showcase with Slick Slider WordPress plugin before 1.2.5 does not have CSRF and authorisation checks in the lswss_save_attachment_data AJAX action, allowing any authenticated users, such as Subscriber, to change…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00344 Published 2022-02-28 Fixed in 1.2.5 CWE-352
Open these records in search →