Description
Contributor Cross Site Scripting (XSS) in Image Carousel <= 1.0.0.41 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GhozyLab | Image Carousel | ≤ 1.0.0.41 | — |
Medium · 6.5
CVE-2025-68074
EUVD-2025-210360GHSA-c6cp-9jv3-vfhh
WordPress Image Carousel plugin <= 1.0.0.41 - Cross Site Scripting (XSS) vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack