Unscored CVE-2014-2333 EUVD-2014-2370GHSA-f75g-rcjj-qxwg

Cross-site scripting (XSS) vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attackers to inject arbitr…

Published Apr 11, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attackers to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these details are obtained from third party information.

References

57746 third-party-advisory
66756 vdb-entry
lazyest-wordpress-xss(92598) vdb-entry
http://wordpress.org/plugins/lazyest-gallery/changelog