Vulnerabilities (CVE)

Filtered by vendor Kiwi-logo-carousel Project Subscribe
Filtered by product Kiwi-logo-carousel
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-9434 1 Kiwi-logo-carousel Project 1 Kiwi-logo-carousel 2024-11-21 4.3 MEDIUM 6.5 MEDIUM
The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=kwlogos&page=kwlogos_settings tab or tab_flags_order parameter.