CVE-2026-97253
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreatura LayerSlider allows Reflected XSS. This issue affects LayerSlider: from n/a through 8.4.0.
- Published Sep 30, 2026
- CVSS 7.1 high
- 0.1% chance of exploitation in the next 30 days (EPSS)