TI-2022-01218 CVE-2022-1336 · GHSA-53p5-v4h6-6q79Carousel CK <= 1.1.0 - Admin+ Stored Cross-Site ScriptingPriority LOW 23The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disa…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00598 · Published 2022-06-13 · No fix listed CWE-79