CVE-2022-37407

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in WPChill Gallery PhotoBlocks plugin <= 1.2.6 at WordPress.

Score

CVSS 3.1 5.4 Medium

Status

Modified - audit@patchstack.com

Published

2022-09-09

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Gallery Photoblocks (Wpchill)
• Gallery Photoblocks Wordpress Plugin (Wpchill)

References

• https://patchstack.com/database/vulnerability/photoblocks-grid-gallery/wordpress-gallery-photoblocks-plugin-1-2-6-multi…
• https://wordpress.org/plugins/photoblocks-grid-gallery/