CVE-2024-13586

The Masy Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'justified-gallery' shortcode in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13586

creationtimestamp| type| source ---|---|--- 2025-01-25 08:05:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3057 2025-01-25 08:28:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113888049398583537 2025-01-25 10:28:38+00:00| seen|...

CVE-2024-13586

CVE-2024-13586 (Masy Gallery, WordPress) is a stored cross-site scripting vulnerability in the Masy Gallery plugin for WordPress, exploitable via the justified-gallery shortcode. Affected versions are up to 1.7, with the issue caused by insufficient input sanitization and output escaping on user-...