CVE-2021-24729

The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata of Grid logo showcase.

Affected products

The Logo Showcase With Slick Slider

Infornweb Logo Showcase With Slick Slider

< 1.2.4

Fix

Available

CVSS 3.1

5.4 MEDIUM

EPSS

0.6% (46th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2021-11-23