Stored Cross-Site Scripting Vulnerability in Slider Revolution Plugin by WordPress

CVE-2024-4092

What is CVE-2024-4092?

The Slider Revolution plugin for WordPress is impacted by a Stored Cross-Site Scripting vulnerability through the ‘htmltag’ parameter across all versions up to 6.7.7. This flaw arises from inadequate input sanitization and output escaping, allowing authenticated attackers, primarily administrators but potentially extending to authors, to inject malicious scripts into web pages. These scripts execute whenever a user accesses the compromised page, threatening the site's integrity and user security.

References