Approved changes feed: RSS · Atom

cpe:2.3:a:3d_cover_carousel_project:3d_cover_carousel:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor3D Cover Carousel Project (7fd40021-a349-5a13-aa7c-29413a83223b)
Product3D Cover Carousel (132bea05-cc60-5046-b7b2-c79b61019b42)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38318 vulnerable 2026-06-08 05:32:55.882065 3D Cover Carousel <= 1.0 Reflected Cross-Site Scripting
MEDIUM (6.1)
The 3D Cover Carousel WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the id parameter in the ~/cover-carousel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.
Published: 2021-09-09T18:09:29.218Z
Updated: 2025-05-05T14:49:31.479Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.