Lucene search
HistoryMay 14, 2024 - 3:41 p.m.
CVE-2024-3582
ungallery
wordpress
csrf
xss
vulnerabilities
The UnGallery WordPress plugin through 2.2.4 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack
Related
wpexploit
wpexploit
Ungallery <= 2.2.4 - Stored XSS via CSRF
2024-04-18 00:00:00
cvelist
cvelist
CVE-2024-3582 Ungallery <= 2.2.4 - Stored XSS via CSRF
2024-05-09 06:00:02
wpvulndb
wpvulndb
Ungallery <= 2.2.4 - Stored XSS via CSRF
2024-04-18 00:00:00
wordfence
wordfence