CVE-2024-45269

Source
https://cve.org/CVERecord?id=CVE-2024-45269
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-45269.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-45269
Published
2024-09-02T00:15:11.680Z
Modified
2025-11-16T02:49:09.994646Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carousel image selection feature. While logged in to the WordPress site with Carousel Slider plugin enabled, accessing a crafted page may cause a user to alter the contents of the WordPress site.

References

Affected packages

Git / github.com/majeedraza1/carousel-slider

Affected ranges

Type
GIT
Repo
https://github.com/majeedraza1/carousel-slider
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

1.*

1.10.0
1.7.3
1.7.4
1.8.0
1.8.0-rc1
1.8.0-rc2
1.8.0-rc3
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.8.6
1.8.9
1.9.0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-45269.json"