Skip to content
Sign in
6.5 Medium

CVE-2026-42700 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Image…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue affects Image Slider Widget: from n/a through 1.1.130.

Affected products and versions

Product Affected versions Fixed in
Image Slider Widget 1.1 earliest → 1.1.130 No fix stated

Other CVEs of Image Slider Widget

The 2 CVEs of Image Slider Widget →
CVE-2024-32707 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Image… 5.9 Medium
Track this CVE