Photo Gallery by Supsystic, be45d5b6-0a38-4bb9-9680-ee3a1edfcaee
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Photo Gallery – Responsive Image Galleries by Supsystic [gallery-by-supsystic] < 1.8.6 Photo Gallery by Supsystic < 1.8.6 - Stored Cross-Site Scripting via CSRF The plugin does not have CSRF check in place and it lacking sanitisation as well as escaping via in AJAX action to update attachment, which could lead to Stored XSS via CSRF
- Affected versions
-
max 1.8.6.
- Status
-
vulnerable