CVE-2024-34443

概要

参考情報

• patchstack.com/articles/unauthenticated-xss-vulnerability-patched-in-slider-revolution-plugin · Third Party Advisory
• patchstack.com/database/vulnerability/revslider/wordpress-slider-revolution-plugin-6-7-11-cross-site-scripting-xss-vulnerability · Third Party Advisory

slider revolution のその他の脆弱性

• CVE-2024-8107中 5.4The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and incl…
• CVE-2024-37449中 4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemePunch OHG Slider Revolutio…
• CVE-2024-34444高 8.8Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0.
• CVE-2024-4637中 5.4The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.7.10 due to …
• CVE-2024-4581中 5.4The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Add Layer widget in all versions up…