Cross-Site Scripting Vulnerability in uxgallery WordPress Photo Gallery Plugin

CVE-2025-27291

What is CVE-2025-27291?

The uxgallery WordPress Photo Gallery plugin suffers from a reflected cross-site scripting (XSS) vulnerability, which can be exploited by injecting malicious scripts into web pages. This vulnerability allows attackers to execute arbitrary JavaScript in the context of the affected user, potentially leading to data theft or unauthorized actions on behalf of the user. Users are encouraged to update to the latest version to mitigate this risk.

References