PT-2023-30788

CVE-2023-48328

·

Published

2023-11-30

·

Updated

2023-12-06

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Imagely WordPress Gallery Plugin – NextGEN Gallery versions through 3.37
Description A Cross-Site Request Forgery (CSRF) issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, including unauthorized data modification or access. The issue affects the Imagely WordPress Gallery Plugin – NextGEN Gallery, allowing Cross Site Request Forgery.
Recommendations For versions through 3.37, update to a version later than 3.37 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾