Advisories · Technology

DiviGear Carousel.

Every CVE that names DiviGear Carousel among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93878 CVE record

CVSS 6.4 Medium

DiviGear Carousel <= 5.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via update_license AJAX Action
- DiviGear Carousel
- Cross-site scripting (XSS)
Not analysed yet 20 Oct 2026