CVE-2021-24382

The Smart Slider 3 plugin versions prior to 3.5.0.9 failed to properly filter the Project Name parameter before displaying it on the page, creating a stored cross-site scripting vulnerability. Although administrator access was required by default to exploit this flaw, site owners who grant lower-privileged users access to the plugin could enable attackers to escalate their privileges through malicious input.

Based on public CVE data (MITRE/NVD).