CVE-2025-5125

PoC —

CVSS 3.1

4.8 medium

EPSS

<1%p14

Published

Jun 20, 2025 (Jun 20, 2025)

Modified

Jun 17, 2026

Description

The Custom Post Carousels with Owl WordPress plugin before 1.4.12 uses the featherlight library and makes use of the data-featherlight attribute without sanitizing before using it.

Vendors: howardehrenberg
Products: custom post carousels with owl
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.