PT-2024-25571

CVE-2024-33938

Published

2024-05-02

Updated

2024-05-14

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions codename065 Sliding Widgets versions 1.5.0 and earlier

Description The issue is related to a Missing Authorization vulnerability that allows Cross-Site Scripting (XSS) in codename065 Sliding Widgets.

Recommendations For versions 1.5.0 and earlier, update to a version that includes the fix for this issue, as no specific workaround is provided.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾