Medium · 6.5 CVE-2023-27620 EUVD-2023-31356GHSA-29vv-f3x5-f29x

WordPress Robo Gallery Plugin <= 3.2.12 is vulnerable to Cross Site Scripting (XSS)

Published Apr 7, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Robosoft Product: Photo Gallery, Images, Slider in Rbs Image Gallery

Description

Auth. (contributor+) Stored Cross-site Scripting (XSS) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.12 versions.

Affected products

Vendor	Product	Affected	Fixed
RoboSoft	Photo Gallery, Images, Slider in Rbs Image Gallery	≤ 3.2.12	—

References

https://patchstack.com/database/vulnerability/robo-gallery/wordpress-robo-gallery-plugin-3-2-12-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry