CVE-2026-111111

The Prime Slider WordPress plugin (Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons) is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.7.2 . The flaw exists in the 'comment' parameter due to insufficient input sanitization and output escapin...

CVE-2026-111111 Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape

The Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.7.2 due to insufficient input sanitization and output escaping. This makes it...