Lucene search
PRIOn knowledge basePRION:CVE-2023-28666HistoryMar 22, 2023 - 9:15 p.m.
Cross site scripting
2023-03-2221:15:00
PRIOn knowledge base
www.prio-n.com
5
wordpress
plugin
vulnerability
authenticated user
cross-site scripting
0.001 Low
EPSS
Percentile
23.3%
The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the ‘imgurl’ parameter to the add_inpost_gallery_slide_item action, which can only be triggered by an authenticated user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| inpost_gallery | le | 2.1.4.1 |
Related
wpvulndb
wpvulndb
InPost Gallery <= 2.1.4.1 - Reflected XSS
2023-03-22 00:00:00
openvas
openvas
WordPress InPost Gallery Plugin <= 2.1.4.1 XSS Vulnerability
2023-08-29 00:00:00
nvd
nvd
CVE-2023-28666
2023-03-22 21:15:19
cvelist
cvelist
CVE-2023-28666
2023-03-22 00:00:00
wpexploit
wpexploit
InPost Gallery <= 2.1.4.1 - Reflected XSS
2023-03-22 00:00:00
cve
cve
CVE-2023-28666
2023-03-22 21:15:19
wordfence
wordfence