4.8
Moyenne
CVE-2024-3899 The Gallery Plugin for WordPress WordPress plugin before 1.8.15 does not sanitise and escape some of its image…
Description
The Gallery Plugin for WordPress WordPress plugin before 1.8.15 does not sanitise and escape some of its image settings, which could allow users with post-writing privilege such as Author to perform Cross-Site Scripting attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Gallery Plugin for WordPress 1.8 | premières → < 1.8.15 | 1.8.15 |
| envira_gallery 1.8 | premières → < 1.8.15 | 1.8.15 |