CVE-2024-3899 Envira Gallery < 1.8.15 - Author+ Stored XSS

2024-09-1106:00:01

WPScan

github.com

wordpress

cross-site scripting

image settings

EPSS

Percentile

9.6%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

The Gallery Plugin for WordPress WordPress plugin before 1.8.15 does not sanitise and escape some of its image settings, which could allow users with post-writing privilege such as Author to perform Cross-Site Scripting attacks.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:enviragallery:envira_gallery:*:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "enviragallery",
    "product": "envira_gallery",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.8.15",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]