Cross site scripting

4images Image Gallery Management System 1.7.11 is affected by cross-site scripting XSS in the Image URL. This vulnerability can result in an attacker to inject the XSS payload into the IMAGE URL. Each time a user visits that URL, the XSS triggers and the attacker can be able to steal the cookie...

4images Image Gallery Management System Cross-Site Scripting Vulnerability

4images Image Gallery Management System is a Php, Mysql based platform for managing images and media for the 4images community. A cross-site scripting vulnerability exists in 4images Image Gallery Management System version 1.7.11. An attacker can exploit this vulnerability to steal cookie...

CVE-2020-35853

4images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS) in the Image URL, allowing an attacker to inject a payload that can trigger on user visits and potentially steal cookies. The connected PT-2021-11862 entry confirms the issue and recommends updating to a vers...

CVE-2020-35853

4images Image Gallery Management System 1.7.11 is affected by cross-site scripting XSS in the Image URL. This vulnerability can result in an attacker to inject the XSS payload into the IMAGE URL. Each time a user visits that URL, the XSS triggers and the attacker can be able to steal the cookie...

PT-2021-11862 · Unknown · 4Images Image Gallery Management System

Name of the Vulnerable Software and Affected Versions: 4images Image Gallery Management System version 1.7.11 Description: The issue concerns cross-site scripting XSS in the Image URL, allowing an attacker to inject an XSS payload. This payload triggers every time a user visits the affected URL,...

Envira Gallery Lite Cross-Site Scripting Vulnerability (CNVD-2021-11280)

Envira Gallery Lite is a plugin that provides responsive gallery functionality for Wordpress from China's Envira Gallery. A cross-site scripting vulnerability exists in Envira Gallery Lite 1.8.3.2, which originates when the program accepts malicious client-side scripts without proper detection, a...

CVE-2020-35581

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the metatitle parameter...

CVE-2020-35581

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the metatitle parameter...

CVE-2020-35582

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

CVE-2020-35582

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

Cross site scripting

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

Cross site scripting

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the metatitle parameter...

CVE-2020-35582

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the posttitle parameter...

CVE-2020-35582

CVE-2020-35582 affects Envira Gallery Lite prior to 1.8.3.3. It is a stored cross-site scripting (XSS) vulnerability: an attacker can inject arbitrary JavaScript/HTML via the post_title parameter in a POST to /wp-admin/post.php. The vulnerability is associated with Envira Gallery Lite, with affec...

CVE-2020-35581

A stored cross-site scripting XSS issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/admin-ajax.php request with the metatitle parameter...

CVE-2020-35581

CVE-2020-35581 details (Envira Gallery Lite) : A stored XSS vulnerability in Envira Gallery Lite versions before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML via a POST to /wp-admin/admin-ajax.php with the meta[title] parameter. Impact is user-side script execution. Remedia...

Envira Gallery Lite Cross-Site Scripting Vulnerability

Envira Gallery Lite is a plugin from China-based Envira Gallery that provides responsive gallery functionality for Wordpress. A cross-site scripting vulnerability exists in Envira Gallery Lite 1.8.3.2, which originates when the program accepts malicious client-side scripts without proper detectio...

Envira Gallery Lite 跨站脚本漏洞

Envira Gallery Lite is a plugin that provides responsive gallery functionality for Wordpress from China's Envira Gallery. A cross-site scripting vulnerability exists in Envira Gallery Lite 1.8.3.2, which originates when the program accepts malicious client-side scripts without proper detection, a...

Envira Gallery Lite 1.8.3.2 Cross Site Scripting

==== Tempest Security Intelligence - ADV-12/2020 ============================= Envira Gallery - Lite Edition - Version 1.8.3.2 Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents ================================================ • Overview •...

CVE-2020-28071

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting XSS in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS...