CVE-2026-81160

The Slick Carousel component in Drupal versions 0.0.0 to 2.1.0 is vulnerable to a stored cross-site scripting (XSS) attack due to improper input neutralization during web page generation. This vulnerability could allow an attacker to inject malicious scripts, potentially compromising user data and session integrity. Organizations using affected versions of Slick Carousel should prioritize remediation to protect against potential exploitation.