WordPress plugin Gallery Block 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

CVE-2024-4386: Improper Neutralization of Input During Web Page Generation

The Gallery Block Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dataatts’ parameter in versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-4386 Gallery Block (Meow Gallery) <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Gallery Block Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dataatts’ parameter in versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Gallery Block (Meow Gallery) < 5.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Gallery Block Meow Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dataatts’ parameter in versions up to, and including, 5.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2024-30717

Name of the Vulnerable Software and Affected Versions Gallery Block Meow Gallery plugin for WordPress versions up to, and including, 5.1.3 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, specifically via the data atts...

Malicious code in essentialist-gallery-block-cgb-guten-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a62a19808d12d60a5872aad70b9aced63cd5ec9661be965069f337e0107f8004 The OpenSSF Package Analysis project identified 'essentialist-gallery-block-cgb-guten-block' @ 1.0.0 npm as malicious. It is considered maliciou...

Gallery Blocks with Lightbox < 2.2.1- Authenticated Stored Cross-Site Scripting

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox Version – 2.2.0 & below . The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the...