cve/2021/CVE-2021-24729.md
2025-09-29 21:09:30 +02:00

895 B

CVE-2021-24729

Description

The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata of Grid logo showcase.

POC

Reference

Github