3D Cover Carousel <= 1.0 - Reflected Cross-Site Scripting
Description
The plugin is vulnerable to Reflected Cross-Site Scripting via the id parameter in the ~/cover-carousel.php file which allows attackers to inject arbitrary web scripts.
Affects Plugins
No known fix - plugin closed
Classification
Miscellaneous
Timeline
Publicly Published
2021-09-08 (about 4 months ago)
Added
2021-09-09 (about 4 months ago)
Last Updated
2022-01-03 (about 18 days ago)