← Problems

Unpatched XSS vulnerability with no fix

The plugin has an unpatched cross-site scripting vulnerability with no fix released.

Tier II · Emerging Problems that are still building up.

4 public reports · first reported 2 August 2023 · last reported 15 April 2026

Idea report · $9 · No contacts · All sales final

See a sample idea report

What's going wrong

Several site owners report that a security scanner or hosting dashboard flagged this carousel plugin for a cross-site scripting weakness.

AI-assisted: written with the help of AI from the reports. The idea report has the full summary.

In the idea report

  • The full summary.
  • The products the 4 reports are about, and how many came each month.
  • Related problems.

No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.