CVE-2026-16537

Name of the Vulnerable Software and Affected Versions Slick Slider versions prior to 0.5.3

Description Insufficient sanitization and escaping of a shortcode attribute value before it is output in an HTML attribute allows users with the Contributor role and above to perform Stored Cross-Site Scripting (XSS) attacks. This occurs when a user views the affected post. Stored XSS is a type of vulnerability where a malicious script is permanently stored on the target server.

Recommendations Update to version 0.5.3 or later.