CVE-2024-49696

CVE-2024-49696 is a Stored XSS in the Robo Gallery (WordPress plugin: Photo Gallery/ Robo Gallery) that affects versions 3.2.21 and earlier. The root cause is improper neutralization of input during web page generation. Impact is cross-site scripting potential; the Patchstack entry notes a low-se...

CVE-2024-10102

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its Gallery settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks

CVE-2024-13384

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin versions prior to 3.2.24 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as admin...

CVE-2024-10144

The Rbs Image Gallery WordPress plugin (versions prior to 3.2.22 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly sanitise and escape certain plugin settings, which allows high-privilege users, such as contributors , to perform XSS attacks. T...