The WordPress Filter Gallery Plugin WordPress plugin before 0.1.6 does not properly escape the filters passed in the ufg_gallery_filters ajax action before outputting them on the page, allowing a high privileged user suc…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.00493·Published 2023-01-02·Fixed in 0.1.6