Authenticated cross-site scripting (XSS) vulnerability in “WordPress Gallery Bank plugin” (versions <= 4.0.50) gallery description

2022年6月13日(月) 10:50

重大性スコア(CVS)

Details

Authenticated cross-site scripting (XSS) vulnerability discovered by Vishnupriya Ilango (Fortinet’s FortiGuard Labs) in the WordPress Gallery Bank plugin (version <= 4.0.50), as described in the gallery ) vulnerability.

solution

Deactivate and remove. This plugin is closed as of December 9, 2021 and cannot be downloaded. Reason: Security issue.

Sources.

Gallery Bank