QwikSec

Security Database

CVE

CWE

Training

CVE-2022-0186

Published: Feb 21, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard

Vendor	Product	Versions
Unknown	Image Photo Gallery Final Tiles Grid	affected `3.5.3 - < 3.5.3`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/3a9c44c0-866e-4fdf-b53d-666db2e11720

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.