CVE-2026-7596

37th percentile - higher than 37% of all known CVEs

In nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0, the data.get function in generate-slide.py of the Slide Generator component leads to cross-site scripting. The attack can be performed remotely and the exploit has been publicly disclosed. The project was informed but has not reacted.

An attacker could inject malicious script that executes in the victim's browser, potentially leading to session data theft or other actions in the user's context. This may affect users generating slides.

Until a fix is released, avoid using the Slide Generator component or restrict its use to trusted input data. Monitor the project repository for updates.