Stored Cross-Site Scripting in Gosign Posts Slider Block Plugin for WordPress

CVE-2024-13399

What is CVE-2024-13399?

The Gosign – Posts Slider Block plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate sanitization of user inputs and improper output escaping within the 'posts-slider-block' functionality. This vulnerability allows authenticated users with Contributor-level access and higher to inject malicious scripts into web pages. Such scripts execute whenever other users visit the compromised pages, potentially leading to unauthorized actions or data exposure.

References