Code Injection Vulnerability in Responsive Slick Slider WordPress

CVE-2023-49852

6.5MEDIUM

Key Information

Vendor: Vsourz Digital
Status: Responsive Slick Slider WordPress
Vendor: Published:; 4 June 2024

Summary

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Vsourz Digital Responsive Slick Slider WordPress allows Code Injection.This issue affects Responsive Slick Slider WordPress: from n/a through 1.4.

Affected Version(s)

Responsive Slick Slider WordPress <= 1.4

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

NONE

Integrity:

LOW

Availability:

LOW

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Timeline

Vulnerability published.
Jun 4, 2024
Vulnerability Reserved.
Nov 30, 2023

Collectors

NVD DatabaseMitre Database

Credit

Abdi Pranata (Patchstack Alliance)