CVE-2023-1915

6.1 mediumEPSS 0.5%

Medium (6.1) in i13websolution thumbnail carousel slider. EPSS 0.5% chance of exploitation in the next 30 days.

The Thumbnail carousel slider WordPress plugin before 1.1.10 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting vulnerability which could be used against high privilege users such as admin.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
Published: 2023-05-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

i13websolution:thumbnail_carousel_slider

References

https://wpscan.com/vulnerability/0487c3f6-1a3c-4089-a614-15138f52f69b
https://wpscan.com/vulnerability/0487c3f6-1a3c-4089-a614-15138f52f69b

Check your stack JSON