EUVD-2021-11579

Malware in sbrugna...

CVE-2021-24667

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox Version – 2.2.0 & below. The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the...

WordPress plugin SimpLy Gallery Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

The vulnerability of the Lightbox module of the SimpLy Gallery Blocks plugin in the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Lightbox module of the SimpLy Gallery Blocks plugin in the WordPress content management system is related to the lack of protective measures taken for the website’s structure when processing image parameters. Exploiting this vulnerability could allow a malicious actor to...

CVE-2021-24667

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox Version – 2.2.0 & below. The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the...

CVE-2021-24667

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox Version – 2.2.0 & below. The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the...

CVE-2021-24667

CVE-2021-24667 affects the WordPress plugin Simply Gallery Blocks with Lightbox (versions 2.2.0 and below; addressed in 2.2.1). The root cause is insufficient validation/escaping of image metadata parameters in the Lightbox feature, allowing an authenticated user with low privileges to execute st...

WordPress 插件跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin Simply Gallery Blocks with Lightbox version 2.2.0 and earlier, which stems from a lack of effective validation and escaping of metadata image parameters in the...