Aller au contenu
Se connecter
5.5 Moyenne

CVE-2024-10034 The Gallery Blocks with Lightbox

Description

The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the gallery link text parameter in all versions up to, and including, 3.2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Editor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Produits et versions touchés

Produit Versions touchées Corrigé en
Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery 3.2 premières → 3.2.4.2 Pas de correctif indiqué
Mixed Media Gallery Blocks 3.2 premières → 3.2.4.2 Pas de correctif indiqué

Autres CVE de Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery

Les 4 CVE de Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery →
CVE-2025-14288 The Gallery Blocks with Lightbox 4.3 Moyenne CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Moyenne CVE-2024-5424 The Gallery Blocks with Lightbox 6.4 Moyenne
Suivre cette CVE