CVE-2022-1282

CVE-2022-1282 affects the WordPress plugin Photo Gallery by 10Web (before 1.6.3). The issue is a reflected XSS: $_GET['image_url'] is not sanitized and is echoed back in the editimage_bwg AJAX action. This can allow script execution via a crafted image_url payload. Remediation is upgrading to ver...

CVE-2022-1281

The CVE-2022-1281 issue affects the WordPress Photo Gallery plugin up to version 1.6.3, where the $_POST['filter_tag'] parameter is not properly escaped before being appended to an SQL query, enabling SQL Injection attacks. Multiple connected advisories confirm the root cause and impact as unauth...

CVE-2022-1281 Photo Gallery < 1.6.3 - Unauthenticated SQL Injection

The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $POST'filtertag' parameter, which is appended to an SQL query, making SQL Injection attacks possible...

WordPress plugin Photo Gallery by 10Web 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Photo Gallery by 10Web plugin is vulnerable to a cross-site scripting vulnerability that stems from...

WordPress plugin Photo Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A SQL injection vulnerability exists in versions prior to WordPress Photo Gallery plugin 1.6.3, which stems...

Gmedia Photo Gallery < 1.20.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed https://youtu.be/kTMg65teTvU Create ...

Gmedia Photo Gallery < 1.20.0 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed PoC https://youtu.be/kTMg65teTvU...

WordPress Gmedia Photo Gallery plugin <= 1.19.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Kaushalendra Dubey in WordPress Gmedia Photo Gallery plugin versions = 1.19.7. Solution Update the WordPress Gmedia Photo Gallery plugin to the latest available version at least 1.20.0...

WordPress Contest Gallery plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress...

CVE-2022-27853

Authenticated author or higher role Stored Cross-Site Scripting XSS in Contest Gallery WordPress plugin = 13.1.0.9...

CVE-2022-27853

Authenticated author or higher role Stored Cross-Site Scripting XSS in Contest Gallery WordPress plugin = 13.1.0.9...

Cross site scripting

Authenticated author or higher role Stored Cross-Site Scripting XSS in Contest Gallery WordPress plugin = 13.1.0.9...

CVE-2022-27853

CVE-2022-27853 is an authenticated stored XSS vulnerability in the WordPress plugin Contest Gallery up to version 13.1.0.9. Affected component: Contest Gallery plugin for WordPress; root cause details are not provided beyond the XSS label in the CVE record. The connected sources corroborate the v...

CVE-2022-27853 WordPress Contest Gallery plugin <= 13.1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated author or higher role Stored Cross-Site Scripting XSS in Contest Gallery WordPress plugin = 13.1.0.9...

WordPress plugin Contest Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. WordPress...

Wordpress Portfolio Gallery和Product Catalog跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in...

WordPress WP Video Gallery plugin <= 1.7.1 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by cydave in WordPress WP Video Gallery plugin versions = 1.7.1. Solution Deactivate and delete. This plugin has been closed as of March 29, 2022 and is not available for download. This closure is temporary, pending a full review...

CVE-2021-25090

The Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in various functions related to AJAX actions, allowing any authenticated users, such as subscriber, to call them. Due to the lack of sanitisation and escaping, it could also allows...

CVE-2021-25090

CVE-2021-25090 corresponds to a stored XSS in the WordPress Grid Kit Portfolio (Portfolio Gallery/Product Catalog) plugin prior to 2.1.0. The issue arises from missing authorization/CSRF checks in AJAX actions, enabling authenticated users (e.g., subscriber) to trigger XSS on pages where a portfo...

Photo Gallery < 1.6.3 - Unauthenticated SQL Injection

The plugin does not properly escape the $POST'filtertag' parameter, which is appended to an SQL query, making SQL Injection attacks possible. POST /wp-admin/admin-ajax.php?imageid=123 HTTP/1.1 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: zh,en;q=0.5 Accept-Encoding: gzip,...