CVE-2024-34444

概要

参考情報

• patchstack.com/articles/unauthenticated-xss-vulnerability-patched-in-slider-revolution-plugin · Third Party Advisory
• patchstack.com/database/vulnerability/revslider/wordpress-slider-revolution-plugin-6-7-0-unauthenticated-broken-access-control-vulnerability · Third Party Advisory

slider revolution のその他の脆弱性

• CVE-2024-8107中 5.4The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and incl…
• CVE-2024-37449中 4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemePunch OHG Slider Revolutio…
• CVE-2024-34443中 5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemePunch OHG Slider Revolutio…
• CVE-2024-4637中 5.4The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.7.10 due to …
• CVE-2024-4581中 5.4The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Add Layer widget in all versions up…