Stored Cross-site Scripting in Kona Gallery Block by Gubbigubbi

CVE-2025-25080

What is CVE-2025-25080?

The Kona Gallery Block by Gubbigubbi contains a vulnerability that allows for Stored Cross-site Scripting (XSS). This security flaw can occur due to improper handling of user input during the web page generation process, which may allow an attacker to inject malicious scripts into the affected product. Users of this plugin, particularly those running versions up to 1.7, should implement security measures to mitigate the risk of exploitation and ensure their websites are protected from potential attacks targeting this weakness.

References