Boletines de Vulnerabilidades

CVE-2025-5125

   
Software afectado WORDPRESS
 
The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the data-featherlight attribute without sanitizing before using it.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-5125