Back to search
CVE-2022-0873
Published: May 16, 2022
Modified: Aug 2, 2024
PUBLISHED
Description
The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed
| Vendor | Product | Versions |
|---|---|---|
Unknown | Gmedia Photo Gallery | affected 1.20.0 - < 1.20.0 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now