Unscored CVE-2014-8758 EUVD-2014-8589GHSA-2c42-f2qj-vh3h

Cross-site scripting (XSS) vulnerability in Best Gallery Albums Plugin before 3.0.70for WordPress allows remote attackers to inject arbitra…

Published Oct 6, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Best Gallery Albums Plugin before 3.0.70for WordPress allows remote attackers to inject arbitrary web script or HTML via the order_id parameter in the gallery_album_sorting page to wp-admin/admin.php.

References

https://g0blin.co.uk/cve-2014-8758/
https://wpvulndb.com/vulnerabilities/8236