CVE-2022-25603: WordPress MaxGalleria plugin <= 6.2.5 - Stored Cross-Site Scripting (XSS) vulnerability
Published Mar 18, 2022
·Updated
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria WordPress plugin (versions 6.2.5).
Affected Software
1 affected component
Maxfoundry Maxgalleria Wordpress=6.2.5
Remediation
Information
Deactivate and delete. The plugin is closed, removed from the WordPress plugins repository, and is no longer maintained.
Event History
Mar 18, 2022
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-25603?
The severity of CVE-2022-25603 is medium.
2
Which software versions are affected by CVE-2022-25603?
MaxGalleria WordPress plugin version 6.2.5 is affected by CVE-2022-25603.
3
How can I fix CVE-2022-25603?
Update the MaxGalleria WordPress plugin to a version that is not affected by the vulnerability.
4
What is the Common Weakness Enumeration (CWE) for CVE-2022-25603?
The CWE for CVE-2022-25603 is CWE-79.