Vulnerability Description
The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Logichunt | Logo Slider | < 4.0.0 |
Related Weaknesses (CWE)
References
- https://wpscan.com/vulnerability/4ef99f54-68df-4353-8fc0-9b09ac0df7ba/Third Party Advisory
- https://wpscan.com/vulnerability/4ef99f54-68df-4353-8fc0-9b09ac0df7ba/Third Party Advisory
FAQ
What is CVE-2024-3288?
CVE-2024-3288 is a vulnerability with a CVSS score of 5.4 (MEDIUM). The Logo Slider WordPress plugin before 4.0.0 does not validate and escape some of its Slider Settings before outputting them back in attributes, which could allow users with the contributor role and...
How severe is CVE-2024-3288?
CVE-2024-3288 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-3288?
Check the references section above for vendor advisories and patch information. Affected products include: Logichunt Logo Slider.