Lucene search

K
vulnrichmentWPScanVULNRICHMENT:CVE-2024-1487
HistoryMar 11, 2024 - 5:56 p.m.

CVE-2024-1487 Photos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site Scripting

2024-03-1117:56:07
WPScan
github.com
1
wordpress
plugin
cross site scripting
cve-2024-1487
gallery
files
contest
author

AI Score

6.1

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks.

AI Score

6.1

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-1487