SQL Injection in Gopiplus Vertical Scroll Slideshow Gallery V2

CVE-2025-49897

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection. This issue affects Vertical scroll slideshow gallery v2: from n…

Vulnerability class: SQL Injection

EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2025-49897?
CVE-2025-49897 is a high-severity vulnerability in Gopiplus Vertical Scroll Slideshow Gallery V2, classified under SQL Injection. CVSS score: 8.8/10. Published 2025-08-15.
How severe is CVE-2025-49897?
High severity. CVSS v3 base score is 8.8 out of 10.