WordPress InPost Gallery Plugin <= 2.1.4.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pluginus:inpostgallery"; ifdescription...

WordPress InPost Gallery Plugin <= 2.1.4.1 is vulnerable to Cross Site Scripting (XSS)

Software InPost Gallery Type Plugin Vulnerable versions = 2.1.4.1 Fixed in 2.1.4.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28666 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID a2e097871dba Credits Joshua Martinelle...

CVE-2023-28666

creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:04+00:00| seen| https://t.me/cibsecurity/60520...

CVE-2023-28666

The InPost Gallery WordPress plugin, in versions 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the addinpostgalleryslideitem action, which can only be triggered by an authenticated user...