CVE-2023-5307

概要

参考情報

• research.cleantalk.org/cve-2023-5307-photos-and-files-contest-gallery-contact-form-21-2-8-1-unauthenticated-stored-xss-via-http-headers · Exploit
• wpscan.com/vulnerability/6fac1e09-21ab-430d-b56d-195e7238c08c · Exploit

contest gallery のその他の脆弱性

• CVE-2025-3862中 5.4Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and includin…
• CVE-2025-1513中 6.1The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Bu…
• CVE-2025-22693高 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery deve…
• CVE-2024-56237中 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery deve…
• CVE-2024-11103緊急 9.8The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24…