CVE-2025-31586

Name of the Vulnerable Software and Affected Versions GhozyLab Gallery – Photo Albums Plugin versions 1.3.170 and earlier

Description The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that an attacker can inject malicious scripts into the website, potentially leading to unauthorized access or control.

Recommendations For versions 1.3.170 and earlier, update to a version that fixes the Stored XSS issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.