CVE-2024-10875 Gallery Manager <= 1.6.58 - Reflected Cross-Site Scripting

The Gallery Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removeQueryArg without appropriate escaping on the URL in all versions up to, and including, 1.6.58. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-10875 Gallery Manager <= 1.6.58 - Reflected Cross-Site Scripting

The Gallery Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of removeQueryArg without appropriate escaping on the URL in all versions up to, and including, 1.6.58. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

WordPress Fancy Gallery Plugin <= 1.6.58 is vulnerable to Cross Site Scripting (XSS)

Software Fancy Gallery Type Plugin Vulnerable versions = 1.6.58 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10875 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3416f5a9cb28 Credits Peter Thaleikis...