Visual Portfolio, Photo Gallery & Post Grid, CVE-2022-2597
- CVE, Research URL
- Application
- Published on
- Sep 05, 2022
- Research Description
- The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks in some of its REST endpoints, allowing users with a role as low as contributor to call them and inject arbitrary CSS in arbitrary saved layouts
- Affected versions
-
max 2.19.0.
- Status
-
vulnerable