https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T03:26:18.423126+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2025-15663 fkie_cve-2025-15663 2026-09-29T03:26:18.453920+00:00

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser of anyone (including an administrator) who views the slider.

 https://vulnerability.circl.lu/vuln/ghsa-w7c4-c6pr-wv3j GHSA-w7c4-c6pr-wv3j 2026-09-29T03:26:18.454014+00:00

The Ultimate Before After Image Slider & Gallery WordPress plugin before 4.7.19 does not properly escape the slider's after-label value before its bundled client-side script re-injects it into the DOM, allowing users with the Author role and above to store a payload that executes in the browser of anyone (including an administrator) who views the slider.