CVE-2025-47481 - WordPress GS Testimonial Slider plugin <= 3.2.9 - Content Injection vulnerability

Back Back to CVE browser

MEDIUM

WordPress GS Testimonial Slider plugin <= 3.2.9 - Content Injection vulnerability

Published May 7, 2025

5.3

MEDIUM

CVSS 3.1

EPSS 0.36%

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in GS Plugins GS Testimonial Slider gs-testimonial allows Code Injection.This issue affects GS Testimonial Slider: from n/a through <= 3.2.9.

Affected products

Vendor GS Plugins Product GS Testimonial Slider Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=3.2.9

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

GS Plugins

GS Testimonial Slider

unaffected

Version	Status	Constraints
0	affected	<=3.2.9

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-13840		Advisory
https://patchstack.com/database/Wordpress/Plugin/gs-testimonial/vulnerability/wordpress-gs-testimonial-slider-plugin-3-2-9-content-injection-vulnerability?_s_id=cve		vdb-entry