CVE-2024-10034

CVE-2024-10034 affects the WordPress plugin “Gallery Blocks with Lightbox” (also listed as Simply Gallery Block). The vulnerability is a Stored Cross-Site Scripting (XSS) flaw in the gallery link text parameter, exploitable by authenticated attackers with Editor-level access or higher. Affected v...

WordPress plugin SimpLy Gallery Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Gallery Blocks with Lightbox plugin <= 3.2.4.2 - Authenticated (Editor+) Stored Cross-Site Scripting vulnerability

Authenticated Editor+ Stored Cross-Site Scripting vulnerability discovered by SE-YEON HWANG in WordPress Plugin SimpLy Gallery versions = 3.2.4.2...

CVE-2024-11409

The Grid View Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0 via deserialization of untrusted input from csallphotosdetails parameter. This makes it possible for authenticated attackers, with Editor-level access and above, to inject a...

CVE-2024-11409

The Grid View Gallery WordPress plugin (versions

WordPress Gallery Blocks with Lightbox Plugin <= 3.2.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Gallery Blocks with Lightbox Type Plugin Vulnerable versions = 3.2.4.2 Fixed in 3.2.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10034 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ff0a8df72d8e Credits SE-YEO...

WordPress plugin Grid View Gallery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPres...

WordPress Grid View Gallery plugin <= 1.0 - Authenticated (Editor+) PHP Object Injection vulnerability

Authenticated Editor+ PHP Object Injection vulnerability discovered by Francesco Carlucci in WordPress Plugin Grid View Gallery versions = 1.0...

WordPress Grid View Gallery Plugin <= 1.0 is vulnerable to PHP Object Injection

Software Grid View Gallery Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-11409 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID ccd9bf1d982e Credits Francesco Carlucci Required privilege...

CVE-2024-51914

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gopiplus drop in image slideshow gallery drop-in-image-slideshow-gallery allows DOM-Based XSS.This issue affects drop in image slideshow gallery: from n/a through = 12.0...

CVE-2024-51914

CVE-2024-51914: WordPress plugin drop in image slideshow gallery (pre-12.0) has a DOM-based XSS vulnerability due to improper input neutralization during page generation. Exploitation details are not provided in the documents, but CVSS notes indicate network access with low attack complexity and ...

CVE-2024-51914 WordPress drop in image slideshow gallery plugin <= 12.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gopi Ramasamy drop in image slideshow gallery allows DOM-Based XSS.This issue affects drop in image slideshow gallery: from n/a through 12.0...

PT-2024-35047 · Unknown · Drop In Image Slideshow Gallery

Name of the Vulnerable Software and Affected Versions: drop in image slideshow gallery versions prior to 12.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This means that an attacker could...

WordPress plugin drop in image slideshow gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

CVE-2024-52430

Deserialization of Untrusted Data vulnerability in bublick Lis Video Gallery lis-video-gallery allows Object Injection.This issue affects Lis Video Gallery: from n/a through = 0.2.1...

CVE-2024-52430

Deserialization of Untrusted Data vulnerability in Lis Lis Video Gallery allows Object Injection.This issue affects Lis Video Gallery: from n/a through 0.2.1...

CVE-2024-52430

CVE-2024-52430 corresponds to a PHP Object Injection vulnerability in the WordPress plugin Lis Video Gallery (versions

CVE-2024-52430 WordPress Lis Video Gallery plugin <= 0.2.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in bublick Lis Video Gallery lis-video-gallery allows Object Injection.This issue affects Lis Video Gallery: from n/a through = 0.2.1...

WordPress AI Responsive Gallery Album plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin AI Responsive Gallery Album versions = 1.4...

WordPress AI Responsive Gallery Album Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)

Software AI Responsive Gallery Album Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-52467 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 558c5967b587 Credits Le Ngoc Anh Required...