Reflected Cross-Site Scripting Vulnerability in Thumbnail Carousel Slider for WordPress

CVE-2023-2120

What is CVE-2023-2120?

The Thumbnail Carousel Slider plugin for WordPress is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping in the search_term parameter. This limitation allows unauthenticated attackers to inject malicious web scripts into pages, which can execute if a user is tricked into clicking on a compromised link. Versions up to 1.1.9 are affected, highlighting the importance of keeping plugins updated to mitigate potential security threats.

References