CVE-2025-15663

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 contains a stored XSS vulnerability. The plugin does not properly escape the slider's after-label value before its bundled client-side script re-injects it into the DOM. Users with the Author role or above can store a...