title: Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting
description: The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata of Grid logo showcase.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Logo Showcase with Slick Slider – Logo Carousel, Logo Slider & Logo Grid
vendor: Unknown
versions:
lessThan: 1.2.4, status: affected, version: 1.2.4, versionType: custom
}