6.4
Moyenne
CVE-2024-3894 The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
Description
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an Image Title in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Photo Gallery, Images, Slider in Rbs Image Gallery 3.2 | premières → 3.2.19 | Pas de correctif indiqué |
| Robo Gallery – Photo & Image Slider 3.2 | premières → 3.2.19 | Pas de correctif indiqué |
Autres CVE de Photo Gallery, Images, Slider in Rbs Image Gallery
Les 9 CVE de Photo Gallery, Images, Slider in Rbs Image Gallery →
CVE-2024-5647
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups…
6.4
Moyenne
CVE-2024-8431
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to unauthorized access of data…
4.3
Moyenne
CVE-2024-3896
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
6.4
Moyenne
CVE-2024-5343
The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Cross-Site Request…
8.8
Élevée