medium4.8
CVE-2025-5125
The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the data-featherlight attribute without saniti…
Impact
The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the data-featherlight attribute without sanitizing before using it.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Howardehrenberg | Custom Post Carousels With Owl | before 1.4.12 |