126 matches found
Cross site scripting
A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inject arbitrary JavaScript code that is viewed by other users...
CVE-2020-9003
A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inject arbitrary JavaScript code that is viewed by other users...
CVE-2020-9003
Summary of CVE-2020-9003 (Modula Image Gallery, WordPress) : A stored XSS vulnerability affects the WordPress Modula Image Gallery plugin, specifically versions before 2.2.5. An authenticated, low-privileged user can inject arbitrary JavaScript code that is then viewed by other users, enabling cl...
PT-2020-20422
Name of the Vulnerable Software and Affected Versions Modula Image Gallery plugin versions prior to 2.2.5 Description A stored XSS issue exists, allowing an authenticated low-privileged user to inject arbitrary JavaScript code that is viewed by other users. This enables the execution of malicious...
Modula Image Gallery < 2.2.5 - Authenticated Stored Cross-Site Scripting (XSS)
A stored XSS vulnerability exists in the version of the plugin 2.2.4. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inject arbitrary JavaScript code into the plugin gallery image which are viewed by other users...
WordPress Modula Image Gallery plugin <= 2.2.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Fortinet in WordPress Modula Image Gallery plugin versions = 2.2.4. Solution Update the WordPress Modula Image Gallery plugin to the latest available version at least 2.2.5...