High · 7.1 CVE-2024-56036 EUVD-2024-52934GHSA-qm8g-c4wj-c733

WordPress odPhotogallery plugin <= 0.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jan 2, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Ondrej Donek Product: odPhotogallery

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ondrej Donek odPhotogallery od-photogallery-plugin allows Reflected XSS.This issue affects odPhotogallery: from n/a through <= 0.5.3.

Affected products

Vendor	Product	Affected	Fixed
Ondrej Donek	odPhotogallery	≤ 0.5.3	—

References

https://patchstack.com/database/Wordpress/Plugin/od-photogallery-plugin/vulnerability/wordpress-odphotogallery-plugin-0-5-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry