CVE-2025-13153 in Logo Slider Plugininformação

Sumário

de MITRE • 02/01/2026

The Logo Slider WordPress plugin before 4.9.0 does not validate and escape some of its slider options before outputting them back in the dashboard, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsável

WPScan

Reservar

13/11/2025

Divulgação

02/01/2026

Moderação

aceite

Entrada

VDB-339373

CPE

pronto

EPSS

0.00006

KEV

não

Atividades

muito baixo

Fontes

Do you need the next level of professionalism?

Upgrade your account now!