PT-2022-13809

Name of the Vulnerable Software and Affected Versions Carousel CK WordPress plugin versions prior to 1.1.1 Description The issue allows high-privileged users, such as admins, to perform Cross-Site Scripting attacks when unfiltered html is disallowed, due to the lack of sanitization and escaping o...

CVE-2022-1336: Improper Neutralization of Input During Web Page Generation

The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfilteredhtml is disallowed...