Responsive Gallery Grid < 2.3.9 - Contributor+ Stored XSS

2023-01-1700:00:00

Lana Codes

163

security

xss

gallery grid

contributor

stored cross site scripting

EPSS

0.001

Percentile

25.5%

JSON

The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Note: In ids, please add the image attachment id.

Exploit: [gallery ids='1' class='" onmouseover="alert(1)" style="background:red;"']

EPSS

0.001

Percentile

25.5%

JSON

Related for WPEX-ID:BE2FC859-3158-4F06-861D-382381A7551B