CVE-2024-37449

The Slider Revolution plugin for WordPress contains a stored cross-site scripting vulnerability affecting versions 6.7.13 and earlier. Attackers with administrator privileges can inject malicious scripts into pages by bypassing inadequate input validation and output encoding mechanisms. The vulnerability only manifests in multisite WordPress setups or environments where the unfiltered_html capability has been restricted, allowing injected code to execute for all users who view the affected pages.

Based on public CVE data (MITRE/NVD).