Cross site scripting

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

CVE-2019-6117

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

CVE-2019-6117

The CVE-2019-6117 entry documents a stored XSS in WordPress wpape APE GALLERY plugin version 1.6.14, arising from getCategories in classGallery.php. The root cause is a lack of proper validation of client-side data by the web application, enabling an attacker to inject scripts that persist in the...

CVE-2019-6117: Improper Neutralization of Input During Web Page Generation

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

PT-2019-17962

Name of the Vulnerable Software and Affected Versions wpape APE GALLERY plugin version 1.6.14 Description The issue concerns a stored XSS vulnerability. It is related to the getCategories function in the classGallery.php file. Recommendations For wpape APE GALLERY plugin version 1.6.14, consider...