CVE-2024-49696

CVE-2024-49696 is a Stored XSS in the Robo Gallery (WordPress plugin: Photo Gallery/ Robo Gallery) that affects versions 3.2.21 and earlier. The root cause is improper neutralization of input during web page generation. Impact is cross-site scripting potential; the Patchstack entry notes a low-se...

CVE-2024-10102

The Rbs Image Gallery WordPress plugin (specifically the Photo Gallery, Images, Slider component) is vulnerable in versions prior to 3.2.22 . The root cause is a failure to properly sanitise and escape certain gallery settings, which can be exploited by high-privilege users, such as those with co...

CVE-2024-13384

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin versions prior to 3.2.24 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as admin...

CVE-2024-10144

The Rbs Image Gallery WordPress plugin (versions prior to 3.2.22 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly sanitise and escape certain plugin settings, which allows high-privilege users, such as contributors , to perform XSS attacks. T...