{ "id": "CVE-2023-0764", "sourceIdentifier": "contact@wpscan.com", "published": "2023-04-17T13:15:37.897", "lastModified": "2023-04-17T14:06:26.107", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role." } ], "metrics": {}, "weaknesses": [ { "source": "contact@wpscan.com", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-79" } ] } ], "references": [ { "url": "https://wpscan.com/vulnerability/d48c6c50-3734-4191-9833-0d9b09b1bd8a", "source": "contact@wpscan.com" } ] }