WordPress plugin InPost Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

InPost Gallery <= 2.1.4.1 - Reflected XSS

The plugin does not sanitise and escape the imgurl parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open...

CVE-2023-28666

The CVE-2023-28666 entry affects the InPost Gallery WordPress plugin. A reflected XSS vulnerability exists in the imgurl parameter of the add_inpost_gallery_slide_item action, exploitable only by an authenticated user, and affects versions prior to 2.2.2. Remediation: upgrade to version 2.2.2 or ...

InPost Gallery <= 2.1.4.1 - Reflected XSS

The plugin does not sanitise and escape the imgurl parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC Make a logged in admin open...

CVE-2023-28666

The InPost Gallery WordPress plugin, in versions 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the addinpostgalleryslideitem action, which can only be triggered by an authenticated user...

CVE-2022-42485

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...

CVE-2022-42485

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...

CVE-2022-41785

Auth. contributor+ Stored Cross-Site Scripting vulnerability in Galleryape Gallery Images Ape plugin = 2.2.8 versions...

CVE-2022-41785

Auth. contributor+ Stored Cross-Site Scripting vulnerability in Galleryape Gallery Images Ape plugin = 2.2.8 versions...

Cross site scripting

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...

CVE-2022-41785 WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting vulnerability in Galleryape Gallery Images Ape plugin = 2.2.8 versions...

CVE-2022-41785

CVE-2022-41785 concerns a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Gallery Images Ape (Galleryape Gallery Images Ape) , affecting versions

CVE-2022-42485

CVE-2022-42485 affects the WordPress Gallery with thumbnail slider plugin versions prior to 6.0. The vulnerability is an Auth. (contributor+) stored Cross-Site Scripting (XSS) flaw in the plugin’s handling, enabling XSS by users with contributor or higher permissions. Affected component: Galaxy W...

CVE-2022-42485 WordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...

CVE-2022-42485 WordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...

WordPress Gallery Box Plugin <= 1.7.30 is vulnerable to Cross Site Request Forgery (CSRF)

Software Gallery Box Type Plugin Vulnerable versions = 1.7.30 Fixed in 1.7.31 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID de0f4c50affe Credits István Márton Require...

PT-2023-14123 · Unknown · Galaxy Weblinks Gallery With Thumbnail Slider Plugin

Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks Gallery with thumbnail slider plugin versions prior to 6.0 Description: A Cross-Site Scripting XSS issue affects the Galaxy Weblinks Gallery with thumbnail slider plugin, allowing unauthorized access for users with contributor...

WordPress Plugin Galaxy Weblinks Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress Plugin Galleryape Gallery Images Ape 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Product Gallery Slider for WooCommerce Plugin <= 2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Product Gallery Slider for WooCommerce Type Plugin Vulnerable versions = 2.2.6 Fixed in 2.2.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID eb1cd0b3c2ea...