VendorsXEN Carousel plugin projectxen_carouselall versions
Vulnerabilities

XEN Carousel plugin project XEN Carousel plugin for WordPress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1CVEs
CVE-2014-4602
Multiple cross-site scripting (XSS) vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) path or (2) ajaxpath parameter.
Published 2014-07-01 · Modified
4.3EPSS 0.016