Reflected Cross-Site Scripting Vulnerability in Image Gallery Plugin for WordPress

CVE-2025-8400

What is CVE-2025-8400?

The Image Gallery plugin for WordPress exposes a security weakness that allows attackers to exploit inadequate input sanitization and output escaping methods. This vulnerability permits unauthorized users to inject malicious web scripts into pages served by the plugin. When users visit an affected page, their browsers may execute these scripts, potentially compromising sensitive information or allowing further attacks. Website administrators should ensure use of secure versions of the plugin and implement proper security measures to mitigate risks associated with this vulnerability.

References