The “Gallery Bank – WordPress Photo Gallery Plugin” plugin for WordPress, which was available in versions up to 4.0.50, had a security vulnerability that could be exploited by users with author-level privileges or higher. This vulnerability was known as Stored Cross-Site Scripting and was related to the Gallery Description field.