Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7x7j-cf43-24q8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox (Version – 2.2.0 & below). The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of image parameters in meta data.

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox (Version – 2.2.0 & below). The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of image parameters in meta data.

EPSS

Процентиль: 48%
0.00247
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 4 лет назад

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox (Version – 2.2.0 & below). The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of image parameters in meta data.

CVSS3: 5.4
fstec
больше 4 лет назад

Уязвимость модуля Lightbox плагина SimpLy Gallery Blocks системы управления содержимым сайта WordPress, позволяющая нарушителю осуществлять межсайтовые сценарные атаки

EPSS

Процентиль: 48%
0.00247
Низкий

Дефекты

CWE-79