SQL Injection in Gopiplus Vertical Scroll Slideshow Gallery V2
CVE-2025-49897
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Vertical scroll slideshow gallery v2 allows Blind SQL Injection. This issue affects Vertical scroll slideshow gallery v2: from n…
Vulnerability class: SQL Injection
EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Gopiplus Vertical Scroll Slideshow Gallery V2 — versions n/a
Weakness classification (CWE)
References
- audit@patchstack.com (vdb-entry)
Frequently asked questions
- What is CVE-2025-49897?
- CVE-2025-49897 is a high-severity vulnerability in Gopiplus Vertical Scroll Slideshow Gallery V2, classified under SQL Injection. CVSS score: 8.8/10. Published 2025-08-15.
- How severe is CVE-2025-49897?
- High severity. CVSS v3 base score is 8.8 out of 10.