CVE-2025-25108

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shalomworld SW Plus shalom-world-media-gallery allows Reflected XSS.This issue affects SW Plus: from n/a through = 2.1...

CVE-2025-25108

CVE-2025-25108 describes a reflected XSS vulnerability in the WordPress SW Plus plugin (versions up to 2.1). The issue arises from improper input neutralization during web page generation, enabling an attacker-controlled input to be reflected in the page. Affected product: WordPress SW Plus plugin