CVE-2023-2708

CVE-2023-2708 affects the Video Gallery plugin for WordPress (≤ 1.0.10). Root cause: insufficient input sanitization and output escaping of the search_term parameter, enabling reflected XSS. Impact: potentially exploited by unauthenticated attackers who lure victims to perform actions triggering ...