cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-13116,https://securityvulnerability.io/vulnerability/CVE-2024-13116,Stored Cross-Site Scripting in Crelly Slider WordPress Plugin by WP Development,"The Crelly Slider plugin for WordPress prior to version 1.4.7 is susceptible to Stored Cross-Site Scripting attacks due to the insufficient sanitization and escaping of certain settings. This vulnerability poses a risk primarily to high-privilege users, such as administrators, allowing them to execute malicious scripts even in environments where unfiltered HTML is restricted, like in multisite configurations. Proper security measures and plugin updates are essential to mitigate this risk.",WordPress,Crelly Slider,,,0.0004299999854993075,false,,false,false,true,true,false,false,2025-01-27T06:00:11.682Z,0
CVE-2024-3752,https://securityvulnerability.io/vulnerability/CVE-2024-3752,Crelly Slider Plugin Vulnerable to Stored Cross-Site Scripting Attacks,"The Crelly Slider WordPress plugin through 1.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)",Wordpress,Crelly Slider,,,0.0004299999854993075,false,,false,false,true,true,false,false,2024-05-06T06:00:01.533Z,0
CVE-2019-15866,https://securityvulnerability.io/vulnerability/CVE-2019-15866,,The crelly-slider plugin before 1.3.5 for WordPress has arbitrary file upload via a PHP file inside a ZIP archive to wp_ajax_crellyslider_importSlider.,Wordpress,Crelly Slider,8.8,HIGH,0.0015699999639764428,false,,false,false,false,,false,false,2019-09-03T11:51:33.000Z,0