CVE-2025-31128

Description

gifplayer is a customizable jquery plugin to play and stop animated gifs. gifplayer contains a cross-site scripting (XSS) vulnerability. This vulnerability is fixed in 0.3.7.

Reserved 2025-03-26 | Published 2025-03-31 | Updated 2025-04-01 | Assigner GitHub_M

Problem types

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

< 0.3.7
affected

References

github.com/...player/security/advisories/GHSA-gr7w-hmch-25g7

github.com/...ommit/2966193d4d066e5a6ba09dbdf1e1c7f8238630c8

cve.org (CVE-2025-31128)

nvd.nist.gov (CVE-2025-31128)

Download JSON