Description
The Gallery Plugin for WordPress WordPress plugin before 1.8.15 does not sanitise and escape some of its image settings, which could allow users with post-writing privilege such as Author to perform Cross-Site Scripting attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Gallery Plugin for WordPress | < 1.8.15 | 1.8.15 |
References
- https://wpscan.com/vulnerability/e3afadda-4d9a-4a51-b744-10de7d8d8578/ exploit vdb-entry technical-description