Medium severity5.4NVD Advisory· Published Apr 17, 2023· Updated Jun 17, 2026

CVE-2023-0764

Description

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription vulnerability. The attacker must have at least the privileges of the Author role.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bestwebsoft/Gallery
cpe:2.3:a:bestwebsoft:gallery:*:*:*:*:*:wordpress:*:*
Range: <4.7.0
WordPress/Gallery by BestWebSoftdescription
WordPress/Gallery by BestWebSoftllm-create
Range: <4.7.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/d48c6c50-3734-4191-9833-0d9b09b1bd8anvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000