EUVD-2019-15684

Malware in sbrugna...

CVE-2019-6117

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

CVE-2019-6117

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

Cross site scripting

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

CVE-2019-6117

The CVE-2019-6117 entry documents a stored XSS in WordPress wpape APE GALLERY plugin version 1.6.14, arising from getCategories in classGallery.php. The root cause is a lack of proper validation of client-side data by the web application, enabling an attacker to inject scripts that persist in the...