Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2023-0764

Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Gallery by BestWebSoft

Default version status: unaffected

  • 0 to < 4.7.0affected

References