Stored Cross-Site Scripting in Gallery Styles Plugin for WordPress

CVE-2025-1783

Summary

The Gallery Styles plugin for WordPress is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability, allowing authenticated users with Contributor-level access and above to exploit the Gallery Block feature. This issue arises from inadequate input sanitization and output escaping, enabling attackers to inject arbitrary web scripts into pages. Any user accessing a compromised page may inadvertently execute these scripts, potentially leading to unauthorized actions or access to sensitive information.

References