4.8
Medium
CVE-2025-5125 The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the…
Description
The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the data-featherlight attribute without sanitizing before using it.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Custom Post Carousels with Owl 1.4 | earliest → < 1.4.12 | 1.4.12 |