CVE-2025-27004

🟡 Monitoruj

Wstrzyknięcie skryptów w wtyczce Famous Grid umożliwia atak XSS.

CVSS

7.1

EPSS

0.3%

Exploit

none

Vendor

Opis źródłowy (NVD)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Famous - Responsive Image And Video Grid Gallery WordPress Plugin famous_grid_image_and_video_gallery allows Reflected XSS.This issue affects Famous - Responsive Image And Video Grid Gallery WordPress Plugin: from n/a through <= 1.4.

xss Brak patcha

Źródła i daty

Źródło	Wartość
NVD – CVSS	7.1
CISA KEV (aktywnie wykorzystywane)	Nie
FIRST EPSS (prawdopodobieństwo exploita)	0.3%
Opublikowano (NVD)	2026-01-08 10:15:48 UTC
Ostatnia modyfikacja (NVD)	2026-09-30 23:10:00 UTC

Referencje

https://patchstack.com/database/Wordpress/Plugin/famous_grid_image_and_video_gallery/vulnerability/wordpress-famous-responsive-image-and-video-grid-gallery-wordpress-plugin-plugin-1-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve ([email protected])