A vulnerability has been found in
contest-gallery Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery Plugin up to 26.0.0.1 on WordPress and classified as
problematic. Affected by this vulnerability is an unknown functionality of the component
Photo Gallery. The manipulation of the argument
Comment leads to cross site scripting.
This vulnerability is known as
CVE-2025-1513. The attack can be launched remotely. There is no exploit available.