The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/3a9c44c0-866e-4fdf-b53d-666db2e11720 | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: WPScan
Published: 2022-02-21T10:46:02
Updated: 2022-02-21T10:46:02
Reserved: 2022-01-11T00:00:00
Link: CVE-2022-0186
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-02-21T11:15:09.263
Modified: 2022-02-28T20:50:11.233
Link: CVE-2022-0186
JSON object: View
Redhat Information
No data.
CWE