CVE-2021-24729: Infornweb Logo Showcase With Slick Slider

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Logo Showcase with Slick Slider WordPress plugin before 1.2.4 does not sanitise the Grid Settings, which could allow users with a role as low as Author to perform stored Cross-Site Scripting attacks via post metadata of Grid logo showcase.

Affected products

• Infornweb Logo Showcase With Slick Slider: before 1.2.4 (fixed in 1.2.4)

Published 2021-11-23. Last modified 2026-06-17.