WordPress Plugin Vulnerabilities

all_in_one_carousel 1.2.20 - /tpl/add_carousel.php id Parameter Reflected XSS

Description

The all_in_one_carousel WordPress plugin was affected by a /tpl/add_carousel.php id Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
all_in_one_carousel
No known fix

References

URL
https://seclists.org/bugtraq/2014/Feb/38

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
c14aab84-791f-4d44-9a9a-80721e30f2bc

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-12-17
Title
Events Manager < 7.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' Shortcode
Published
2024-11-04
Title
CF7 WOW Styler < 1.6.9 - Reflected Cross-Site Scripting
Published
2026-01-12
Title
TheNa <= 1.5.5 - Reflected Cross-Site Scripting
Published
2025-01-16
Title
Translation.Pro <= 1.0.0 - Reflected Cross-Site Scripting
Published
2025-09-22
Title
Photo Gallery by Ays < 6.3.9 - Contributor+ Stored XSS