datAInsights CVE Current

CVE-2023-0764 — Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The…

Published: 2023-04-17 · CVSS: 5.4 · CVSS 3.1

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7