CVE-2025-31128: Rubentd Gifplayer

Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.

gifplayer is a customizable jquery plugin to play and stop animated gifs. gifplayer contains a cross-site scripting (XSS) vulnerability. This vulnerability is fixed in 0.3.7.

Affected products

• Rubentd Gifplayer: before 0.3.7 (fixed in 0.3.7)

Published 2025-03-31. Last modified 2026-06-17.