Medium · 6.5 CVE-2024-34759 EUVD-2024-35029GHSA-jjx3-27m5-92gh

WordPress Picture Gallery plugin <= 1.5.11 - Cross Site Scripting (XSS) vulnerability

Published Jun 4, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: videowhisper Product: Picture Gallery

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in VideoWhisper Picture Gallery allows Stored XSS.This issue affects Picture Gallery: from n/a through 1.5.11.

Affected products

Vendor	Product	Affected	Fixed
VideoWhisper	Picture Gallery	≤ 1.5.11	—

References

https://patchstack.com/database/vulnerability/picture-gallery/wordpress-picture-gallery-plugin-1-5-11-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry