Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: nik00726 Component: Team Circle Image Slider With Lightbox Clear all filters
TI-2023-02434 CVE-2023-2604 · GHSA-65mf-5rmq-4984

Team Circle Image Slider With Lightbox <= 1.0.17 - Reflected Cross-Site Scripting

Priority LOW 28

The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.0.17 due to insufficient input sanitizat…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00433 Published 2023-06-09 No fix listed CWE-79
TI-2022-00564 CVE-2022-0648 · GHSA-5c6j-pf48-q4gh

Team Circle Image Slider With Lightbox < 1.0.16 - Reflected Cross-Site Scripting

Priority LOW 29

The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-14 Fixed in 1.0.16 CWE-79