Stored XSS Vulnerability in GT3 Photo Gallery by GT3 Themes
CVE-2025-47677

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Photo Gallery - Gt3 Image Gallery & Gutenberg Block Gallery
Vendor
CVE Published:
7 May 2025

What is CVE-2025-47677?

The GT3 Photo Gallery by GT3 Themes is susceptible to a stored cross-site scripting (XSS) vulnerability. This flaw arises from improper input neutralization during web page generation, allowing an attacker to inject malicious scripts. Successful exploitation can lead to unauthorized access, data theft, and the potential to compromise site integrity. The versions affected span from n/a to 2.7.7.25, making it crucial for users to implement security measures and update to the latest version to mitigate risks.

Affected Version(s)

Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.25

References

https://patchstack.com/database/wordpress/plugin/gt3-phot...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

muhammad yudha (Patchstack Alliance)
.
The Cyber Security Vulnerability Database.