CVE-2023-3279 — NextGEN Gallery < 3.39 - Admin+ Local File Inclusion

CVE-2023-3279

NextGEN Gallery < 3.39 - Admin+ Local File Inclusion PUBLISHED

Description (CNA)

The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to generate paths passed to include function/s, allowing Admin users to perform LFI attacks

Affected (CNA)

Vendor / product	Versions
Unknown / WordPress Gallery Plugin	affected 0 before 3.39

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/3b7a7070-8d61-4ff8-b003-b4ff06221635

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/3b7a7070-8d61-4ff8-b003-b4ff06221635

CISA-ADP

No English description supplied.

No references supplied.