cve/2024/CVE-2024-6850.md

CVE-2024-6850

Description

The Carousel Slider WordPress plugin before 2.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

POC

Reference

• https://wpscan.com/vulnerability/c06995cb-1685-4751-811f-aead52a597a7/

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/cyb3r-w0lf/nuclei-template-collection
• https://github.com/fkie-cad/nvd-json-data-feeds