Stored XSS Vulnerability in Serious Slider
CVE-2024-35762
5.4MEDIUM
Key Information
- Vendor
- Cryout Creations
- Status
- Serious Slider
- Vendor
- Published:
- 21 June 2024
Summary
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4.
Affected Version(s)
Serious Slider <= 1.2.4
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
LOW
Integrity:
LOW
Availability:
NONE
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
REQUIRED
Scope:
CHANGED
Timeline
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database
Credit
Steven Julian (Patchstack Alliance)