EUVD-2026-69996

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal Slick Carousel allows Stored XSS. This issue affects Slick Carousel versions: from 0.0.0 to 2.1.0...

CVE-2026-81160

The Drupal Slick Carousel module (versions 0.0.0 through 2.1.0) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the Slick UI sub-module's failure to sufficiently validate user input within Slick option sets that contain HTML for carousel buttons. An attacker could exploit t...