Cross site scripting

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

CVE-2019-6117

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

CVE-2019-6117

The CVE-2019-6117 entry documents a stored XSS in WordPress wpape APE GALLERY plugin version 1.6.14, arising from getCategories in classGallery.php. The root cause is a lack of proper validation of client-side data by the web application, enabling an attacker to inject scripts that persist in the...