CVE-2023-2568

Photo Gallery by Ays < 5.1.7 - Reflected XSS

published June 12, 2023

CVSS
—
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

The Photo Gallery by Ays WordPress plugin before 5.1.7 does not escape some parameters before outputting it back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.7th percentile
Published
2023-06-12T17:28Z
EPSS history
Timeline
  • 12 JUN 17:28Z
    Photo Gallery by Ays < 5.1.7 - Reflected XSS
    cvelistv5