CVE-2024-8283

CVE-2024-8283 describes a stored Cross-Site Scripting (XSS) vulnerability in the 10Web Slider WordPress plugin prior to version 1.2.59. This flaw allows high-privilege users, such as administrators, to inject malicious scripts due to insufficient sanitization of certain settings, even in environments where unfiltered_html is restricted. The vulnerability has a CVSS score of 4.8 (Medium), indicating a network-based attack with low complexity, requiring high privileges and user interaction, potentially leading to limited impact on confidentiality and integrity. The EPSS score is very low, suggesting a minimal likelihood of exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also non-existent, further indicating a low level of attention and perceived threat.