CVE-2021-24544

CVE-2021-24544 is a Cross-Site Scripting (XSS) vulnerability affecting the Responsive WordPress Slider plugin up to version 2.2.0. The plugin fails to properly sanitize and escape slider options, allowing authenticated users, including those with subscriber-level privileges, to inject malicious scripts. This vulnerability has a CVSS score of 5.4 (Medium) with an attack vector of Network and low attack complexity, requiring user interaction. Successful exploitation could lead to privilege escalation, such as creating rogue administrator accounts, by targeting logged-in administrators viewing the slider list. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, indicating low public awareness.