High · 7.1 CVE-2023-32107 EUVD-2023-36375GHSA-4fpp-3mjc-8348

WordPress Photo Gallery by Ays Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)

Published Aug 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Photo Gallery Team Product: Photo Gallery by Ays – Responsive Image Gallery

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin <= 5.1.3 versions.

Affected products

Vendor	Product	Affected	Fixed
Photo Gallery Team	Photo Gallery by Ays – Responsive Image Gallery	≤ 5.1.3	—

References

https://patchstack.com/database/vulnerability/gallery-photo-gallery/wordpress-photo-gallery-by-ays-responsive-image-gallery-plugin-5-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry