Continuous Image Carousel With Lightbox Vulnerabilities

[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versions.

Affected:

up to 1.0.16

Fixed in:

1.0.16

Disclosed:

Jun 22, 2023

CVE-2023-28776 on NVD →

[en] Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Continuous Image Carousel With Lightbox plugin <= 1.0.15 versions.

Affected:

up to 1.0.16

Fixed in:

1.0.16

Disclosed:

Apr 7, 2023

CVE-2023-28792 on NVD →

The Continuous Image Carousel With Lightbox for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term, order_by and order_pos parameters in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to in...

CVSS:

6.1

Affected:

up to 1.0.15

Fixed in:

1.0.16

Disclosed:

Mar 27, 2023

CVE-2023-28792 on NVD →

The Continuous Image Carousel With Lightbox for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term, order_by and order_pos parameters in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to in...

CVSS:

6.1

Affected:

up to 1.0.15

Fixed in:

1.0.16

Disclosed:

Mar 27, 2023

CVE-2023-28776 on NVD →

The Continuous Image Carousel With Lightbox for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term, order_by and order_pos parameters in versions up to, and including, 1.0.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to in...

Affected:

up to 1.0.16

Fixed in:

1.0.16

Disclosed:

Mar 27, 2023