Security Advisory

CVE-2023-5307

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-10-31 13:54:43

Last updated 2025-04-22 20:03:31

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Photos and Files Contest Gallery WordPress plugin before 21.2.8.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks via certain headers.

← Browse all CVEs View on cve.org ↗