5.4 Medium

CVE-2023-0151 The uTubeVideo Gallery WordPress plugin before 2.0.8 does not validate and escape some of its shortcode attributes…

Description

The uTubeVideo Gallery WordPress plugin before 2.0.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected products and versions

Product	Affected versions	Fixed in
uTubeVideo Gallery 2.0	earliest → < 2.0.8	2.0.8

Do you use uTubeVideo Gallery?

Track this CVE Watch uTubeVideo Gallery Check my SBOMs

www.cveye.io/en/cve/CVE-2023-0151

Timeline

Published February 13, 2023
Last modified March 21, 2025

References

wpscan.com wpscan.com

Track this CVE