Lucene search
K

8 matches found

CVE
CVE
added 2026/01/22 4:52 p.m.10 views

CVE-2026-22388

CVE-2026-22388 is a Cross-Site Scripting (Stored XSS) vulnerability in the WordPress plugin Owl Carousel WP (owl-carousel-wp) , affecting versions from unspecified through 2.2.2. The issue arises from improper input neutralization during web page generation, enabling attackers to inject malicious...

5.9CVSS5.4AI score0.00017EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.13 views

CVE-2026-22388 WordPress Owl Carousel WP plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Emu Owl Carousel WP owl-carousel-wp allows Stored XSS.This issue affects Owl Carousel WP: from n/a through = 2.2.2...

5.9CVSS0.00017EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/28 2:5 a.m.4 views

CVE-2025-5590

The Owl carousel responsive plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

8.8CVSS6.8AI score0.00167EPSS
Exploits0References1
OSV
OSV
added 2024/02/10 8:15 a.m.2 views

CVE-2024-24801

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0...

5.4CVSS7.3AI score0.00077EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/02/10 7:53 a.m.18 views

CVE-2024-24801 WordPress OWL Carousel Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LogicHunt OWL Carousel – WordPress Owl Carousel Slider allows Stored XSS.This issue affects OWL Carousel – WordPress Owl Carousel Slider: from n/a through 1.4.0...

6.5CVSS6.5AI score0.00077EPSS
Exploits0References1
OSV
OSV
added 2023/08/08 12:15 p.m.0 views

CVE-2023-23829

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pierre JEHAN Owl Carousel plugin = 0.5.3 versions...

4.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2023/08/08 12:15 p.m.13 views

CVE-2023-23829

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pierre JEHAN Owl Carousel plugin = 0.5.3 versions...

6.5CVSS5.8AI score0.0007EPSS
Exploits0References1
CVE
CVE
added 2023/08/08 11:35 a.m.130 views

CVE-2023-23829

CVE-2023-23829 affects the Owl Carousel WordPress plugin versions ≤ 0.5.3. It is a Stored Cross-Site Scripting (XSS) vulnerability that requires Admin+ privileges. Patch status indicates the flaw is Unpatched; the recommended remediation is to update to a version higher than 0.5.3 (if available)....

6.5CVSS5.2AI score0.0007EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder