Skip to content
OpenAdvisories

Vendor

logichunt

7 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-13247 Public exploit

    Logo Slider <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lgx_tooltip_position' Parameter

    The Logo Slider – Logo Carousel, Client Logo Slider & Brand Showcase for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lgx_tooltip_position' parameter in all versions up to, and including, 5.5 due to insufficient input s…