Read the docs

spicethemes

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

spicethemes records in CISA KEV

No spicethemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Newsblogger 2 records MEDIUM Newscrunch 2 records MEDIUM Carousel, Recent Post Slider And Banner Slider 1 record LOW Spice Starter Sites 1 record LOW

Records

1 record in Carousel, Recent Post Slider And Banner Slider · all components

TI-2023-04934 CVE-2023-5362 · GHSA-hwmg-864w-89m6

Cross-site scripting in spicethemes Carousel, Recent Post Slider and Banner Slider

Priority LOW 29

The Carousel, Recent Post Slider and Banner Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spice_post_slider' shortcode in versions up to, and including, 2.0 due to insufficient input sanit…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00599 Published 2023-10-30 No fix listed CWE-79
Open these records in search →