CVE-2025-13153

The Logo Slider WordPress plugin versions prior to 4.9.0 are vulnerable to a Stored Cross-Site Scripting (XSS) attack. This occurs because the software fails to properly validate and escape certain slider options before they are outputted back in the dashboard. This allows users with contributor ...