PT-2023-14123 · Unknown · Galaxy Weblinks Gallery With Thumbnail Slider Plugin

Thiennv · Published 2023-03-21 · Updated 2023-03-24 · CVE-2022-42485

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Galaxy Weblinks Gallery with thumbnail slider plugin versions prior to 6.0

Description A Cross-Site Scripting (XSS) issue affects the Galaxy Weblinks Gallery with thumbnail slider plugin, allowing unauthorized access for users with contributor or higher permissions.

Recommendations For Galaxy Weblinks Gallery with thumbnail slider plugin versions prior to 6.0, update to version 6.0 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-42485

Affected Products

Galaxy Weblinks Gallery With Thumbnail Slider Plugin

References · 3

• https://osv.dev/vulnerability/CVE-2022-42485 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42485 · Security Note
• https://patchstack.com/database/vulnerability/gallery-with-thumbnail-slider/wordpress-gallery-with-thumbnail-slider-plugin-6-0-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve · Note