CVE-2023-1915: Thumbnail carousel slider < 1.1.10 - Reflected XSS
Published May 15, 2023
·Updated
The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting vulnerability which could be used against high privilege users such as admin.
Affected Software
1 affected component
I13websolution Thumbnail Carousel Slider Wordpress<1.1.10
Event History
May 15, 2023
CVE Published
via MITRE·12:15 PM
Data Sourced
via MITRE·12:15 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this WordPress plugin?
The vulnerability ID for this WordPress plugin is CVE-2023-1915.
2
What is the severity of CVE-2023-1915?
The severity of CVE-2023-1915 is medium with a CVSS score of 6.1.
3
How does CVE-2023-1915 affect the Thumbnail carousel slider WordPress plugin?
CVE-2023-1915 affects the Thumbnail carousel slider WordPress plugin version up to 1.1.10.
4
What is the impact of CVE-2023-1915?
CVE-2023-1915 allows for Reflected Cross-Site Scripting (XSS) attacks, potentially targeting high privilege users like admin.
5
How can I fix the CVE-2023-1915 vulnerability in the Thumbnail carousel slider WordPress plugin?
To fix the CVE-2023-1915 vulnerability, update the Thumbnail carousel slider WordPress plugin to version 1.1.10 or higher.