Lucene search
PRIOn knowledge basePRION:CVE-2023-2568HistoryJun 12, 2023 - 6:15 p.m.
Cross site scripting
2023-06-1218:15:00
PRIOn knowledge base
www.prio-n.com
4
wordpress
plugin
xss
attributes
high privilege users
0.001 Low
EPSS
Percentile
23.0%
The Photo Gallery by Ays WordPress plugin before 5.1.7 does not escape some parameters before outputting it back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| photo_gallery | lt | 5.1.7 |
Related
cve
cve
CVE-2023-2568
2023-06-12 18:15:10
wpvulndb
wpvulndb
Photo Gallery by Ays < 5.1.7 - Reflected XSS
2023-05-16 00:00:00
cvelist
cvelist
CVE-2023-2568 Photo Gallery by Ays < 5.1.7 - Reflected XSS
2023-06-12 17:28:23
nvd
nvd
CVE-2023-2568
2023-06-12 18:15:10
wpexploit
wpexploit
Photo Gallery by Ays < 5.1.7 - Reflected XSS
2023-05-16 00:00:00
wordfence
wordfence