Unscored CVE-2018-17946 EUVD-2018-9687GHSA-g8v3-4x27-wjh3

The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupd…

Published Oct 3, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter.

References

https://wordpress.org/plugins/slideshow-gallery/#developers
http://www.defensecode.com/advisories/DC-2017-01-014_WordPress_Tribulant_Slideshow_Gallery_Plugin_Advisory.pdf