Lucene search
WpvulndbWPEX-ID:950F46AE-4476-4969-863A-0E55752953B3HistoryMay 31, 2021 - 12:00 a.m.
FooGallery < 2.0.35 - Authenticated Stored Cross-Site Scripting
2021-05-3100:00:00
wpvulndb
313
0.001 Low
EPSS
Percentile
24.8%
In the plugin, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue.
Create or edit a gallery and add the following payload in the Custom CSS field: </style><svg/onload=alert(document.domain)>
Then, view the embed gallery (which must have at least one image) in a page or post to trigger the XSSRelated
cvelist
cvelist
nvd
nvd
CVE-2021-24357
2021-06-14 14:15:08
patchstack
patchstack
prion
prion
Cross site scripting
2021-06-14 14:15:00
wpvulndb
wpvulndb
FooGallery < 2.0.35 - Authenticated Stored Cross-Site Scripting
2021-05-31 00:00:00
openvas
openvas
WordPress FooGallery Plugin < 2.0.35 XSS Vulnerability
2023-05-17 00:00:00
cve
cve
CVE-2021-24357
2021-06-14 14:15:08