CVE-2023-5307: Contest-Gallery Contest Gallery

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The Photos and Files Contest Gallery WordPress plugin before 21.2.8.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks via certain headers.

Affected products

Published 2023-10-31. Last modified 2026-06-17.