The GS Testimonial Slider plugin by GS Plugins, up to version 3.2.9, contains a code injection vulnerability due to improper control over code generation. This flaw allows an unauthenticated attacker to inject code remotely, potentially leading to information disclosure. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability affects confidentiality but not integrity or availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an attacker to inject code remotely, resulting in limited confidentiality impact. There is no impact on integrity or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations or workarounds have been provided at this time.