Security Advisory

CVE-2023-5307

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-10-31 13:54:43

Last updated 2025-04-22 20:03:31

Assigner WPScan

State PUBLISHED

Description

The Photos and Files Contest Gallery WordPress plugin before 21.2.8.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks via certain headers.

← Browse all CVEs View on cve.org ↗