CVE-2022-4060

 

Published at: - 16-01-2023 05:15

Last modified: - 24-01-2023 07:23

Total changes: - 3

Description

The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://wpscan.com/vulnerability/8f982ebd-6fc5-452d-8280-42e027d01b1e

 

Keywords

NVD

 

CVE-2022-4060

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures