Lucene search
JrXnmWPVDB-ID:37A58F4E-D2BC-4825-8E1B-4AAF0A1CF1B6HistoryApr 11, 2022 - 12:00 a.m.
Photo Gallery < 1.6.3 - Reflected Cross-Site Scripting
2022-04-1100:00:00
JrXnm
wpscan.com
7
0.001 Low
EPSS
Percentile
30.0%
The plugin does not properly sanitize the $_GET[‘image_url’] variable, which is reflected back to the users when executing the editimage_bwg AJAX action.
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| photo-gallery | lt | 1.6.3 |
Related
patchstack
patchstack
cvelist
cvelist
CVE-2022-1282 Photo Gallery < 1.6.3 - Reflected Cross-Site Scripting
2022-05-02 16:05:58
prion
prion
Design/Logic Flaw
2022-05-02 16:15:00
cnvd
cnvd
WordPress Photo Gallery by 10Web plugin跨站脚本漏洞
2022-05-07 00:00:00
wpexploit
wpexploit
Photo Gallery < 1.6.3 - Reflected Cross-Site Scripting
2022-04-11 00:00:00
cve
cve
CVE-2022-1282
2022-05-02 16:15:09
nvd
nvd
CVE-2022-1282
2022-05-02 16:15:09
openvas
openvas
WordPress Photo Gallery Plugin < 1.6.3 Multiple Vulnerabilities
2022-05-05 00:00:00