CoreCVE
Back

MEDIUM

WordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability

Published Sep 22, 2025

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Carousel Ultimate carousel allows Stored XSS.This issue affects Carousel Ultimate: from n/a through <= 1.8.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Patchstack
Published Sep 22, 2025
Updated May 13, 2026
Reserved Sep 3, 2025
Link CVE-2025-58652
CISA Vulnrichment
Updated Sep 23, 2025
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2025-58652
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-58652
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a