CVE-2021-24529

Опубликовано: 23 авг. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

The Grid Gallery – Photo Image Grid Gallery WordPress plugin before 1.2.5 does not properly sanitize the title field for image galleries when adding them via the admin dashboard, resulting in an authenticated Stored Cross-Site Scripting vulnerability.

Ссылки

https://wpscan.com/vulnerability/8953d931-19f9-4b73-991c-9c48db1af8b5
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/8953d931-19f9-4b73-991c-9c48db1af8b5
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:awplife:grid_gallery:*:*:*:*:*:wordpress:*:*

Версия до 1.2.5 (исключая)

EPSS

Процентиль: 56%

0.00332

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-9q33-9x86-9cj9

github

больше 3 лет назад

The Grid Gallery â€“ Photo Image Grid Gallery WordPress plugin before 1.2.5 does not properly sanitize the title field for image galleries when adding them via the admin dashboard, resulting in an authenticated Stored Cross-Site Scripting vulnerability.