CVE-2021-24291
Photo Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)
Vexday Risk Score
23Bajo
Decisión SSVC (CISA)
Attend
PoC disponible → seguir de cerca
CVSS —EPSS 14.4%KEV nãoPoC —Nuclei simMetasploit —Patch —
Ciclo de vida
14 may 2021Publicada en NVD
Recomendación: Planificar corrección próxima — ya existe PoC pública.
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.69 was vulnerable to Reflected Cross-Site Scripting (XSS) issues via the gallery_id, tag, album_id and _id GET parameters passed to the bwg_frontend_data AJAX action (available to both unauthenticated and authenticated users)
Productos afectados
Photo Gallery Team · Photo Gallery by 10Web – Mobile-Friendly Image Gallery¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →