PT-2023-29610 · WordPress · Wpdevart Gallery – Image/Video Gallery With Thumbnails
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
wpdevart Gallery – Image and Video Gallery with Thumbnails plugin versions <= 2.0.3
Description
The issue is related to an Unauth. Stored Cross-Site Scripting (XSS) vulnerability. This allows for the storage of malicious scripts that can be executed by other users, potentially leading to unauthorized actions. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
Recommendations
For versions <= 2.0.3, update to a version higher than 2.0.3 to resolve the issue.
At the moment, there is no information about other specific mitigation measures for this vulnerability.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wpdevart Gallery – Image/Video Gallery With Thumbnails