← CVE Intelligence

CVE-2025-5125

Custom Post Carousels with Owl < 1.4.12 - Contributor+ Stored XSS PUBLISHED

Description (CNA)

The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the data-featherlight attribute without sanitizing before using it.

Affected (CNA)

Vendor / productVersions
Unknown / Custom Post Carousels with Owlaffected 0 before 1.4.12

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.