Cross-Site Scripting Vulnerability in Carousel Horizontal Posts Content Slider by WordPress

CVE-2026-22347

What is CVE-2026-22347?

A Cross-Site Scripting (XSS) vulnerability exists in the Carousel Horizontal Posts Content Slider plugin for WordPress. This flaw allows an attacker to inject malicious scripts into the web page through improper input handling during the generation of the DOM. Any user interacting with the site may unknowingly execute these scripts, leading to exposure of sensitive information or further exploitation of user sessions. Users of the Carousel Horizontal Posts Content Slider plugin on versions prior to 3.3.2 are particularly at risk and should take immediate steps to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References