Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-58266 EUVD-2025-30590GHSA-37q7-p6vr-5j9p

WordPress Gianism plugin <= 6.0.0 - Cross Site Scripting (XSS) vulnerability

Published Sep 22, 2025 · Updated May 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fumiki Takahashi Gianism gianism allows Stored XSS.This issue affects Gianism: from n/a through <= 6.0.0.

Affected products

VendorProductAffectedFixed
Fumiki Takahashi Gianism ≤ 6.0.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
SLE Micro 6.2 rust-keylime 0.2.8+116-160000.1.1 SUSE-SU-2026:20744-1
SLE Micro 5.5 rust-keylime 0.2.7+141-150500.3.5.1 SUSE-SU-2025:02811-1
SLE Micro 5.4 rust-keylime 0.2.7+141-150400.3.5.1 SUSE-SU-2025:02810-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLE Micro 5.3 rust-keylime 0.2.7+141-150400.3.7.1 SUSE-SU-2025:02809-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed rust-keylime 0.2.7+141-1.1 openSUSE-SU-2025:15426-1
openSUSE Leap 16.0 rust-keylime 0.2.8+116-160000.1.1 openSUSE-SU-2026:20364-1

Advisories 6

References