Cross-site Scripting Vulnerability in Gopiplus Card Flip Image Slideshow
CVE-2025-30983

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Card Flip Image Slideshow
Vendor
CVE Published:
4 July 2025

What is CVE-2025-30983?

The Gopiplus Card Flip Image Slideshow has a vulnerability that allows for improper neutralization of input during web page generation, leading to potential DOM-based Cross-site Scripting (XSS) attacks. This issue can be exploited by attackers to inject malicious scripts into the web pages viewed by users, compromising user data and potentially allowing unauthorized actions. Users of versions from n/a to 1.5 are advised to review security measures and apply necessary updates to mitigate risks associated with this vulnerability.

Affected Version(s)

Card flip image slideshow <= 1.5

References

https://patchstack.com/database/wordpress/plugin/card-fli...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peter Thaleikis (Patchstack Alliance)
.
CVE-2025-30983 : Cross-site Scripting Vulnerability in Gopiplus Card Flip Image Slideshow