WordPress Responsive Gallery Grid plugin < 2.3.15 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Responsive Gallery Grid versions 2.3.15...

CVE-2024-4091 Responsive Gallery Grid < 2.3.15 - Admin+ Stored XSS

The Responsive Gallery Grid WordPress plugin before 2.3.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

CVE-2024-4091

The Responsive Gallery Grid WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.3.15 . The root cause is the lack of sanitization and escaping of certain plugin settings, which allows high-privilege users, such as administrators, to execute malicious scripts...

CVE-2024-4091 Responsive Gallery Grid < 2.3.15 - Admin+ Stored XSS

The Responsive Gallery Grid WordPress plugin before 2.3.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...