Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: logichunt Component: Logo Slider Clear all filters
TI-2024-11418 CVE-2024-12308 · GHSA-33vw-m9w6-c8vf

Logo Slider < 4.6.0 - Contributor+ Stored XSS

Priority MEDIUM 58

The Logo Slider WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contri…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00292 Published 2025-02-24 Fixed in 4.6.0 CWE-79
TI-2024-10100 CVE-2024-10896 · GHSA-x8c4-4qx3-cf7m

Logo Slider < 4.5.0 - Contributor+ Stored XSS

Priority MEDIUM 58

The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00403 Published 2024-11-28 Fixed in 4.5.0 CWE-78
TI-2024-09701 CVE-2024-10473 · GHSA-5xvj-wwgx-xf7x

Logo Slider < 4.5.0 - Author+ Stored XSS

Priority MEDIUM 58

The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo Settings when outputing them in pages where the Logo Slider shortcode is embed, which could allow users with a role as low as Au…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00403 Published 2024-11-28 Fixed in 4.5.0 CWE-79
TI-2024-05045 CVE-2024-5429 · GHSA-v4cx-r43j-pwh7

Logo Slider < 4.1.0 - Contributor+ Stored XSS

Priority HIGH 66

The Logo Slider WordPress plugin before 4.1.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Sto…

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00478 Published 2024-10-17 Fixed in 4.1.0 CWE-79
TI-2024-03083 CVE-2024-3288 · GHSA-8jg8-869p-gv73

Logo Slider < 4.0.0 - Contributor+ Stored XSS

Priority LOW 24

The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Sto…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00295 Published 2024-06-07 Fixed in 4.0.0 CWE-79
TI-2022-04262 CVE-2022-4664 · GHSA-647w-72c4-73xq

Logo Slider < 3.6.0 - Contributor+ Stored XSS in Shortcode

Priority MEDIUM 58

The Logo Slider WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contri…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00578 Published 2023-02-06 Fixed in 3.6.0