CVE-2023-28666

5.4 Moyenne

Publiée le 22/03/2023 à 22:15 · Modifiée le 24/10/2026 à 01:10 · Modifiée · Source : vulnreport@tenable.com

Description

The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the add_inpost_gallery_slide_item action, which can only be triggered by an authenticated user.

Traduire en français

Produits concernés

InPost Gallery WordPress Plugin
Pluginus inpost gallery

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.4 Moyenne	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N`
3.1	5.4 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-79

Références

https://www.tenable.com/security/research/tra-2023-3 ExploitThird Party Advisory
https://www.tenable.com/security/research/tra-2023-3 ExploitThird Party Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories