Cross-site Scripting Vulnerability in BVD Easy Gallery Manager by Balcom-Vetillo Design, Inc.
CVE-2025-22353

7.1HIGH

Key Information:

Vendor
WordPress
Status
Bvd Easy Gallery Manager
Vendor
CVE Published:
7 January 2025

Summary

The BVD Easy Gallery Manager, developed by Balcom-Vetillo Design, Inc., is vulnerable to reflected Cross-site Scripting (XSS) attacks. This security issue arises from the improper neutralization of input, allowing attackers to inject malicious scripts. Such vulnerabilities could lead to unauthorized actions being performed on behalf of the user or the exposure of sensitive information. BVD Easy Gallery Manager versions from n/a through 1.0.6 are affected, posing risks for users who fail to apply necessary updates.

Affected Version(s)

BVD Easy Gallery Manager <= 1.0.6

References

https://patchstack.com/database/wordpress/plugin/bvd-easy...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

stealthcopter (Patchstack Alliance)
.