CVE-2024-10565: Slider by 10Web < 1.2.62 - Admin+ Stored XSS via Widget

Q: What is the severity of CVE-2024-10565?

CVE-2024-10565 has a potentially high severity due to its ability to facilitate Stored Cross-Site Scripting (XSS) attacks.

Q: How do I fix CVE-2024-10565?

To fix CVE-2024-10565, update the Slider by 10Web plugin to version 1.2.62 or later.

Q: What versions of the Slider by 10Web are affected by CVE-2024-10565?

CVE-2024-10565 affects all versions of the Slider by 10Web plugin prior to 1.2.62.

Q: Who is at risk from CVE-2024-10565?

High privilege users, such as admins, are at risk from CVE-2024-10565, especially in multisite configurations.

Q: What type of vulnerability is CVE-2024-10565?

CVE-2024-10565 is a Stored Cross-Site Scripting (XSS) vulnerability.

Published Mar 25, 2025

Updated

The Slider by 10Web WordPress plugin before 1.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed (for example in multisite setup).

Affected Software

2 affected components

10web Slider<1.2.62

10web Slider Wordpress<1.2.62

Event History

Mar 25, 2025

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2024-10565?

CVE-2024-10565 has a potentially high severity due to its ability to facilitate Stored Cross-Site Scripting (XSS) attacks.

How do I fix CVE-2024-10565?

To fix CVE-2024-10565, update the Slider by 10Web plugin to version 1.2.62 or later.

What versions of the Slider by 10Web are affected by CVE-2024-10565?

CVE-2024-10565 affects all versions of the Slider by 10Web plugin prior to 1.2.62.

Who is at risk from CVE-2024-10565?

High privilege users, such as admins, are at risk from CVE-2024-10565, especially in multisite configurations.

What type of vulnerability is CVE-2024-10565?