CVE-2021-24349

The CVE concerns the WordPress plugin “Gallery from files” (versions up to 1.6.0). The vulnerability arises from improper sanitization of user-supplied image filenames when output in an error message, enabling a reflected Cross-Site Scripting (XSS) vulnerability. The issue is compounded by a lack...