A cross-site scripting (XSS) vulnerability exists in nextlevelbuilder ui-ux-pro-max-skill up to version 2.5.0. The flaw is in the data.get function within the Slide Generator component's generate-slide.py script. This vulnerability can be exploited remotely and has been publicly disclosed. The project has been notified but has not yet issued a fix.