Lucene search
WpvulndbWPEX-ID:1F1CCE27-9426-4646-8B1D-1415246C94CDHistoryMar 22, 2023 - 12:00 a.m.
InPost Gallery <= 2.1.4.1 - Reflected XSS
2023-03-2200:00:00
wpvulndb
61
inpost gallery
2.1.4.1
reflected xss
admin-ajax.php
exploit
logged in admin
imgurl vulnerability
EPSS
0.001
Percentile
23.3%
The plugin does not sanitise and escape the imgurl parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Make a logged in admin open https://example.com/wp-admin/admin-ajax.php?action=add_inpost_gallery_slide_item&imgurl="><svg%20onload=alert(1)>Related
wpvulndb
wpvulndb
InPost Gallery <= 2.1.4.1 - Reflected XSS
2023-03-22 00:00:00
cve
cve
CVE-2023-28666
2023-03-22 21:15:19
prion
prion
Cross site scripting
2023-03-22 21:15:00
cvelist
cvelist
CVE-2023-28666
2023-03-22 00:00:00
nvd
nvd
CVE-2023-28666
2023-03-22 21:15:19
openvas
openvas
WordPress InPost Gallery Plugin <= 2.1.4.1 XSS Vulnerability
2023-08-29 00:00:00
wordfence
wordfence