TI-2026-76740 CVE-2026-93878 · GHSA-q774-j486-p33p
Stored cross-site scripting in DiviGear Carousel WordPress plugin
Priority LOW 28
The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in all versions up to, and including, 5.2.0 due to insufficient input sanitization and output escapin…