NA

CVE-2023-3154

Published: 16/10/2023 Updated: 07/11/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

The WordPress Gallery Plugin WordPress plugin prior to 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the `gallery_edit` function, allowing an malicious user to access arbitrary resources on the server.

Vulnerable Product Search on Vulmon Subscribe to Product

imagely nextgen gallery