CVE-2025-5700

creationtimestamp| type| source ---|---|--- 2025-06-17 11:38:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18579 2025-06-17 15:41:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrstg5l2e72o...

CVE-2025-5700

The CVE-2025-5700 entry concerns the WordPress plugin Simple Logo Carousel (versions up to 1.9.3). The issue is a Stored Cross-Site Scripting (XSS) vulnerability in the id parameter caused by insufficient input sanitization and output escaping. The vulnerability can be triggered by an attacker wh...

CVE-2025-5700 Simple Logo Carousel <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

The Simple Logo Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.9.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acce...

WordPress Simple Logo Carousel plugin <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via id Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Simple Logo Carousel versions = 1.9.3...