CVE-2024-4092

The Slider Revolution plugin before version 6.7.8 contains a stored cross-site scripting vulnerability in the 'htmltag' parameter caused by inadequate sanitization and escaping of user input. Attackers with authentication credentials, typically administrators but potentially authors if permissions are configured, can inject malicious scripts into pages that execute for all subsequent visitors. The vulnerability affects all versions up to and including 6.7.7 and is remedied in version 6.7.8.

Based on public CVE data (MITRE/NVD).