Reflected Cross-Site Scripting Vulnerability in Video Carousel Slider for WordPress

CVE-2023-2710

Summary

The Video Carousel Slider with Lightbox plugin for WordPress is prone to Reflected Cross-Site Scripting (XSS) due to inadequate input sanitization and output escaping in the search_term parameter. Attackers can exploit this vulnerability by tricking users into clicking malicious links, enabling them to inject arbitrary scripts that run in the context of the affected application. This can facilitate a range of attacks, including stealing cookies, session tokens, or other sensitive information, significantly compromising the security of the affected WordPress sites.

References