CVE-2024-8283: Slider by 10Web < 1.2.59 - Admin+ Stored XSS
The Slider by 10Web WordPress plugin before 1.2.59 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed (for example in multisite setup).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8283?
CVE-2024-8283 has a high severity rating due to its potential for Stored Cross-Site Scripting attacks.
How do I fix CVE-2024-8283?
To fix CVE-2024-8283, update the Slider by 10Web WordPress plugin to version 1.2.59 or later.
Who is affected by CVE-2024-8283?
CVE-2024-8283 affects users of the Slider by 10Web WordPress plugin versions prior to 1.2.59.
What vulnerabilities does CVE-2024-8283 introduce?
CVE-2024-8283 introduces the risk of Stored Cross-Site Scripting attacks due to insufficient sanitization of settings.
Can CVE-2024-8283 be exploited by users without admin privileges?
No, CVE-2024-8283 can only be exploited by high privilege users such as admins.