OWL Carousel Slider - Cross-Site Scripting
CVE-2024-13627
Verified
Description
OWL Carousel Slider WordPress plugin v2.2 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craft malicious URL.
Severity
Medium
CVSS Score
4.7
Exploit Probability
1%
Affected Product
owl_carousel_slider
Published Date
February 7, 2026
Template Author
sourabh-sahu
CVE-2024-13627.yaml
4.7Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVE ID:
cve-2024-13627
CWE ID:
cwe-79
Remediation Steps
Update to the latest version of the plugin where the issue is fixed or apply security patches that sanitize and escape parameters properly.