Reflected Cross-site Scripting (XSS) Vulnerability in Creative Image Slider - Responsive Slider Plugin
CVE-2024-30447
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 29 March 2024
What is CVE-2024-30447?
The vulnerability in the Creative Solutions Creative Image Slider β Responsive Slider Plugin arises from improper neutralization of user input during web page generation, enabling attackers to exploit reflected Cross-Site Scripting (XSS). This flaw allows unauthorized scripts to be executed in the context of an affected user's session, potentially leading to sensitive data exposure or redirection to malicious sites. The issue is present in all versions leading up to 2.1.3, making it imperative for users to take action to mitigate the risk associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Creative Image Slider β Responsive Slider Plugin <= 2.1.3
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved