Skip to content
OpenAdvisories
High · 7.1 CVE-2025-32649 EUVD-2025-11722GHSA-mfwj-jp8q-988q

WordPress GB Gallery Slideshow Plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Published Apr 17, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gb-plugins GB Gallery Slideshow gb-gallery-slideshow allows Reflected XSS.This issue affects GB Gallery Slideshow: from n/a through <= 1.3.

Affected products

VendorProductAffectedFixed
gb-plugins GB Gallery Slideshow ≤ 1.3 —

References