Lucene search
CydaveWPVDB-ID:0903920C-BE2E-4515-901F-87253EB30940HistoryJun 13, 2022 - 12:00 a.m.
Gallery < 2.0.0 - Reflected Cross-Site Scripting
2022-06-1300:00:00
cydave
wpscan.com
10
0.001 Low
EPSS
Percentile
36.9%
The plugin does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting issue
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| gallery-album | lt | 2.0.0 |
Related
wpexploit
wpexploit
Gallery < 2.0.0 - Reflected Cross-Site Scripting
2022-06-13 00:00:00
nvd
nvd
CVE-2022-1946
2022-07-04 13:15:08
cnvd
cnvd
WordPress Gallery plugin跨站脚本漏洞
2022-07-06 00:00:00
cvelist
cvelist
CVE-2022-1946 Gallery < 2.0.0 - Reflected Cross-Site Scripting
2022-07-04 13:05:50
prion
prion
Cross site scripting
2022-07-04 13:15:00
cve
cve
CVE-2022-1946
2022-07-04 13:15:08
nuclei
nuclei
WordPress Gallery <2.0.0 - Cross-Site Scripting
2022-07-06 10:15:00