CVE-2025-48347: Vincent Mimoun-Prat Bxslider Integration For WordPress

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vincent Mimoun-Prat bxSlider integration for WordPress bxslider-integration allows Stored XSS.This issue affects bxSlider integration for WordPress: from n/a through <= 1.7.2.

Affected products

• Vincent Mimoun-Prat Bxslider Integration For WordPress: up to and including 1.7.2

Published 2025-08-28. Last modified 2026-06-17.