alexdtn
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Simple AL Slider | 1 | – | Dec 12, 2025 |
| Subitem AL Slider | 1 | – | Feb 7, 2026 |
Exploited and recent CVEs
- CVE-2026-1634 Subitem AL Slider <= 1.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] 0.3%
- CVE-2025-14137 Simple AL Slider <= 1.2.10 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF'] 0.3%