CVE-2023-2568 | BDVDB-2026-204530 Detail

Photo Gallery by Ays

Description#

The Photo Gallery by Ays WordPress plugin before 5.1.7 does not escape some parameters before outputting it back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/b1704a12-459b-4f5d-aa2d-a96646ddaf3e

Exploit#

https://wpscan.com/vulnerability/b1704a12-459b-4f5d-aa2d-a96646ddaf3e

History#

Version 12023-06-12Record published in the CVE List.
Version 22025-01-03Most recent update recorded in the CVE List.