5.4
Medium
CVE-2023-0764 The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information,…
Description
The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Gallery by BestWebSoft 4.7 | earliest → < 4.7.0 | 4.7.0 |