6.4
Medium
CVE-2024-3896 The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
Description
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the Gallery title field in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Photo Gallery, Images, Slider in Rbs Image Gallery 3.2 | earliest → 3.2.19 | No fix stated |
| Robo Gallery – Photo & Image Slider 3.2 | earliest → 3.2.19 | No fix stated |
Other CVEs of Photo Gallery, Images, Slider in Rbs Image Gallery
The 9 CVEs of Photo Gallery, Images, Slider in Rbs Image Gallery →
CVE-2024-5647
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups…
6.4
Medium
CVE-2024-8431
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to unauthorized access of data…
4.3
Medium
CVE-2024-3894
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
6.4
Medium
CVE-2024-5343
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Cross-Site Request…
8.8
High