CVE-2017-1002011

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value-galleryname and $value-gallerydescription where anyone with privileges to modify or add galleries/images and inject javascript into the database...

CVE-2017-1002011

CVE-2017-1002011 affects the WordPress plugin image-gallery-with-slideshow up to version 1.5.2 . The vulnerability is a stored XSS where an attacker with privileges to modify or add galleries/images can inject JavaScript into the database via the fields $value->gallery_name and $value->gall...