2 matches found
CVE-2021-39313: Improper Neutralization of Input During Web Page Generation
The Simple Image Gallery WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the msg parameter found in the /simple-image-gallery.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.6...
6.1CVSS5.7AI score0.00782EPSS
SaveExploits0References2
PT-2021-22522
Name of the Vulnerable Software and Affected Versions: Simple Image Gallery WordPress plugin versions up to and including 1.0.6 Description: The issue allows attackers to inject arbitrary web scripts via the msg parameter found in the /simple-image-gallery.php file, enabling Reflected Cross-Site...
6.1CVSS0.00782EPSS
SaveExploits0References5
20