Lucene search
+L

1542 matches found

attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•12 views

CVE-2026-22388

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Emu Owl Carousel WP owl-carousel-wp allows Stored XSS.This issue affects Owl Carousel WP: from n/a through = 2.2.2...

5.9CVSS5.3AI score0.00249EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/22 4:52 p.m.•49 views

CVE-2026-22388

CVE-2026-22388 is a Cross-Site Scripting (Stored XSS) vulnerability in the WordPress plugin Owl Carousel WP (owl-carousel-wp) , affecting versions from unspecified through 2.2.2. The issue arises from improper input neutralization during web page generation, enabling attackers to inject malicious...

5.9CVSS5.8AI score0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•11 views

CVE-2026-22347 WordPress Carousel Horizontal Posts Content Slider plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through =...

6.5CVSS5.8AI score0.00196EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/22 4:52 p.m.•38 views

CVE-2026-22347

CVE-2026-22347 affects the WordPress plugin Carousel Horizontal Posts Content Slider (

6.5CVSS5.8AI score0.00196EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•20 views

CVE-2026-22347

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through =...

6.5CVSS5.2AI score0.00196EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•41 views

CVE-2026-22347 WordPress Carousel Horizontal Posts Content Slider plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through =...

6.5CVSS0.00196EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/22 4:51 p.m.•37 views

CVE-2025-49043

CVE-2025-49043: WordPress plugin Magic Responsive Slider and Carousel (magic_carousel) is affected by Reflected XSS due to improper input neutralization during page generation. Affected: Magic Responsive Slider and Carousel WordPress plugin

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:51 p.m.•6 views

CVE-2025-49043

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magiccarousel allows Reflected XSS.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through = 1.6...

6.1CVSS5.4AI score0.00288EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/22 4:51 p.m.•8 views

CVE-2025-49043 WordPress Magic Responsive Slider and Carousel WordPress plugin <= 1.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magiccarousel allows Reflected XSS.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through = 1.6...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•4 views

CVE-2026-22388: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Emu Owl Carousel WP owl-carousel-wp allows Stored XSS.This issue affects Owl Carousel WP: from n/a through = 2.2.2...

5.9CVSS5.8AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•24 views

PT-2026-4205

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through =...

5.4AI score0.00196EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•8 views

CVE-2025-49043: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magiccarousel allows Reflected XSS.This issue affects Magic Responsive Slider and Carousel WordPress: from n/a through = 1.6...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•7 views

CVE-2026-22347: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in subhansanjaya Carousel Horizontal Posts Content Slider carousel-horizontal-posts-content-slider allows DOM-Based XSS.This issue affects Carousel Horizontal Posts Content Slider: from n/a through =...

6.5CVSS5.8AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•25 views

PT-2026-3967

Name of the Vulnerable Software and Affected Versions Magic Responsive Slider and Carousel WordPress versions prior to 1.6 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means a...

5.5AI score0.00288EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•35 views

PT-2026-4214

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Emu Owl Carousel WP owl-carousel-wp allows Stored XSS.This issue affects Owl Carousel WP: from n/a through = 2.2.2...

5.4AI score0.00249EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•24 views

WordPress plugin Owl Carousel: Cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.9CVSS5.7AI score0.00249EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•30 views

WordPress plugin Carousel Horizontal Posts Content Slider has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.6AI score0.00196EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:38 p.m.•25 views

CVE-2023-50100

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

5.4CVSS5.9AI score0.00444EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:10 p.m.•19 views

CVE-2018-18931

An issue was discovered in the Tightrope Media Carousel digital signage product 7.0.4.104. Due to insecure default permissions on the C:\TRMS\Services directory, an attacker who has gained access to the system can elevate their privileges from a restricted account to full SYSTEM by replacing the...

9CVSS8.1AI score0.01631EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:31 a.m.•24 views

CVE-2023-25457

Missing Authorization vulnerability in Richteam Slider Carousel – Responsive Image Slider.This issue affects Slider Carousel – Responsive Image Slider: from n/a through 1.5.1...

5.3CVSS8.6AI score0.00592EPSS
SaveExploits0References1
Rows per page
Query Builder