CVE-2023-0764: Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting
Bestwebsoft · Gallery by BestWebSoft
Fixed in 4.7.0 · Affected: Bestwebsoft Gallery by BestWebSoft before 4.7.0 · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 39% of scored CVEs
DescriptionCVE.org
The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Gallery by BestWebSoftbefore 4.7.0
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Weakness
- Cross-site Scripting
- Vendor
- Bestwebsoft
- Published
- April 2023
CoverageNo articles yet
No CyberSIXT article names CVE-2023-0764 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.