PT-2025-13816 · Gifplayer · Gifplayer

·

CVE-2025-31128

·

Published

2025-03-31

·

Updated

2025-06-12

CVSS v4.0

6.9

Medium

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions gifplayer versions prior to 0.3.7
Description The issue is a cross-site scripting (XSS) vulnerability. All versions under 0.3.7 are impacted.
Recommendations For versions prior to 0.3.7, please upgrade to 0.3.7 to resolve the issue.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-31128
DRUPAL-CONTRIB-2025-032
GHSA-GR7W-HMCH-25G7

Affected Products

Gifplayer