CVE-2023-25979: XSS
First published: Wed May 03 2023(Updated: )
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Video Gallery by Total-Soft Video Gallery plugin <= 1.7.6 versions.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Total-soft Video Gallery | <1.7.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the CVE ID for this vulnerability?
The CVE ID for this vulnerability is CVE-2023-25979.
What is the title of this vulnerability?
The title of this vulnerability is 'Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Video Gallery by Total-Soft Video ...'
What is the affected software?
The affected software is Total-Soft Video Gallery plugin version 1.7.6 and below.
What is the severity of this vulnerability?
The severity of this vulnerability is medium (4.8).
Is there a fix available for this vulnerability?
Yes, there is a fix available. It is recommended to update to version 1.7.7 or above of the Total-Soft Video Gallery plugin.
- collector/nvd-latest
- collector/nvd-index
- vendor/total-soft
- canonical/total-soft video gallery