Lucene search
ZhongFu Su(JrXnm) of WuHan University WPVDB-ID:1AF4BEB6-BA16-429B-ACF2-43F9594F5ACEHistoryOct 10, 2022 - 12:00 a.m.
Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting
2022-10-1000:00:00
ZhongFu Su(JrXnm) of WuHan University
wpscan.com
3
envira gallery lite
vulnerable
cross-site scripting
$_server['request_uri']
security risk
0.001 Low
EPSS
Percentile
40.3%
The plugin does not escape the $_SERVER[‘REQUEST_URI’] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
PoC
https://example.com/wp-admin/edit.php?post_type=envira&page;=envira-gallery-lite-addons&">
| CPE | Name | Operator | Version |
|---|---|---|---|
| envira-gallery-lite | lt | 1.8.4.7 |
Related
nvd
nvd
CVE-2022-2190
2022-10-31 16:15:10
cve
cve
CVE-2022-2190
2022-10-31 16:15:10
patchstack
patchstack
openvas
openvas
WordPress Envira Photo Gallery Lite Plugin < 1.8.4.7 XSS Vulnerability
2022-11-01 00:00:00
prion
prion
Cross site scripting
2022-10-31 16:15:00
cvelist
cvelist
CVE-2022-2190 Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting
2022-10-31 00:00:00
wpexploit
wpexploit
Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting
2022-10-10 00:00:00