Medium severity6.1NVD Advisory· Published Jul 31, 2023· Updated Jun 17, 2026
CVE-2023-3292
CVE-2023-3292
Description
The grid-kit-premium WordPress plugin before 2.2.0 does not escape some parameters as well as generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<2.2.0+ 1 more
- (no CPE)range: <2.2.0
- (no CPE)range: <2.2.0
- cpe:2.3:a:wpsofts:portfolio_gallery\,_product_catalog_-_grid_kit_portfolio:*:*:*:*:*:wordpress:*:*Range: <2.2.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/d993c385-c3ad-49a6-b079-3a1b090864c8nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.