CVE-2022-2597
05.09.2022, 13:15
The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks in some of its REST endpoints, allowing users with a role as low as contributor to call them and inject arbitrary CSS in arbitrary saved layoutsEnginsight
| Vendor | Product | Version |
|---|---|---|
| visualportfolio | visual_portfolio\,_photo_gallery_\&_post_grid | 𝑥 < 2.19.0 |
𝑥
= Vulnerable software versions