Логотип exploitDog
bind:CVE-2022-0186
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-0186

Количество 2

Количество 2

nvd логотип

CVE-2022-0186

почти 4 года назад

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-4gvq-h6xw-fx34

почти 4 года назад

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-0186

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard

CVSS3: 5.4
0%
Низкий
почти 4 года назад
github логотип
GHSA-4gvq-h6xw-fx34

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard

0%
Низкий
почти 4 года назад

Уязвимостей на страницу