Stored XSS in WordPress Photo Gallery by 10Web <= 1.8.27

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Plugin Name: Photo Gallery by 10Web <= 1.8.27 2. Vulnerability Type: Admin+ Stored XSS 3. Description: The plugin fails to properly sanitize and escape certain fields in its Gallery settings, allowing users with high privileges (such as administrators) to perform stored cross-site scripting attacks when the ability to filter HTML is disabled. 4. PoC: An administrator creates/edits a gallery, adds/edits an image, and sets the following payload in the “Alt/Title” field and saves it: . The XSS will trigger on pages/posts where the gallery is embedded, or during preview. 5. Affected Plugin: photo-gallery 6. Fix Status: Fixed in version 1.8.28. 7. References: - CVE - URL 8. Classification: - Type: XSS - OWASP Top 10: A7: Cross-Site Scripting (XSS) - CWE: CWE-79 - CVSS: 3.5 (low) 9. Additional Information: - Original Researcher: Dmitrii Ignatyev - Submitter: Dmitrii Ignatyev - Submitter Website: https://www.linkedin.com/in/dmitriy-ignatyev-8a9189267/ - Verified: Yes - WPVDB ID: db73e8d8-feb1-4daa-937e-a73969a93bcc - Publication Date: 2024-09-18 - Added Date: 2024-09-18 - Last Updated: 2024-09-18 10. Other Vulnerabilities: - Paid Member Subscriptions < 2.4.2 - Reflected Cross-Site Scripting (XSS) - Gutenberg < 14.3.1 - Multiple Stored XSS - Leaflet Map < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode - WOOCS < 1.3.9.4 - Contributor+ Stored XSS - Sensei LMS < 4.18.0 - Contributor+ Stored XSS This information provides a detailed description of the vulnerability, its scope, and remediation, helping to understand its severity and how to fix it.

Goal Reached Thanks to every supporter — we hit 100%!

Stored XSS in WordPress Photo Gallery by 10Web <= 1.8.27

More from this source