Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-28666

The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the add_inpost_gallery_slide_item action, which can only be triggered by an authenticated user.

Published

2023-03-22T21:15:19.133

Last Modified

2025-02-25T21:15:13.867

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-79
  • Type: Secondary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application pluginus inpost_gallery ≤ 2.1.4.1 Yes
References