Medium · 4.8 CVE-2022-27853 EUVD-2022-32341GHSA-hqfw-qph2-8f38

WordPress Contest Gallery plugin <= 13.1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Apr 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) in Contest Gallery (WordPress plugin) <= 13.1.0.9

Vendor	Product	Affected	Fixed
Contest Gallery	Contest Gallery (WordPress plugin)	<= 13.1.0.9 – ≤ 13.1.0.9	—