Cross site scripting

2020-02-2517:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

JSON

A stored XSS vulnerability exists in the Envira Photo Gallery plugin through 1.7.6 for WordPress. Successful exploitation of this vulnerability would allow a authenticated low-privileged user to inject arbitrary JavaScript code that is viewed by other users.

CPENameOperatorVersion
envira_galleryle1.7.6

CPE	Name	Operator	Version
	envira_gallery	le	1.7.6

References

wordpress.org/plugins/envira-gallery-lite/

wpvulndb.com/vulnerabilities/10089