SQL Injection Vulnerability in Vertical Scroll Slideshow Gallery by Gopiplus

CVE-2025-49897

What is CVE-2025-49897?

A vulnerability in the Vertical Scroll Slideshow Gallery by Gopiplus allows for Blind SQL Injection due to improper handling of special elements in SQL commands. This issue affects all versions from an unspecified release up through version 9.1. Exploiting this vulnerability can allow an attacker to manipulate database queries, potentially compromising sensitive data or leading to further attacks on the underlying infrastructure.

References