Skip to content
OpenAdvisories
High · 7.1 CVE-2025-31925 EUVD-2025-17507GHSA-66g5-cf28-5gr7

WordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jun 9, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT lbg-audio8-html5-radio_ads allows Reflected XSS.This issue affects SHOUT: from n/a through <= 3.5.3.

Affected products

VendorProductAffectedFixed
LambertGroup SHOUT ≤ 3.5.3 —

References