Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Slider by 10Web 1.2.62 Clear all filters
TI-2024-09788 CVE-2024-10566 · GHSA-76c9-635j-h2r5

Slider by 10Web < 1.2.62 - Contributor+ Stored XSS

Priority MEDIUM 60

The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00339 Published 2025-03-25 Fixed in 1.2.62 CWE-79
TI-2024-09787 CVE-2024-10565 · GHSA-qq4f-w524-x6mg

Slider by 10Web < 1.2.62 - Admin+ Stored XSS via Widget

Priority MEDIUM 60

The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00339 Published 2025-03-25 Fixed in 1.2.62 CWE-79