Lucene search

CVE-2024-5970

🗓️ 18 Jun 2024 22:09:15Reported by [email protected]Type

The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maxgallery_thumb shortcode due to insufficient input sanitization and output escaping

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2024-5970 MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode	18 Jun 202421:36	–	vulnrichment
Cvelist	CVE-2024-5970 MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode	18 Jun 202421:36	–	cvelist
Patchstack	WordPress MaxGalleria Plugin <= 6.4.4 is vulnerable to Cross Site Scripting (XSS)	18 Jun 202400:00	–	patchstack
CVE	CVE-2024-5970	18 Jun 202422:15	–	cve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 17, 2024 to June 23, 2024)	27 Jun 202415:00	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/a0bb1036-3e45-4ac9-b920-3b9629a3a724
plugins	www.plugins.trac.wordpress.org/browser/maxgalleria/tags/6.4.4/maxgalleria-shortcode-thumb.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Jun 2024 22:15Current

CVSS36.4

EPSS0.00102