Gallery PhotoBlocks, a68496ed-67d3-4761-8f1f-d64424bec529
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Gallery PhotoBlocks [photoblocks-grid-gallery] < 1.2.0 Gallery PhotoBlocks < 1.2.0 - Authenticated Cross-Site Scripting (XSS) The vulnerability is due to insufficient validation of gallery name parameter and image caption parameter. A remote attacker (any authenticated low privileged user) can exploit this to execute arbitrary script code within the context of the application.
- Affected versions
-
max 1.2.0.
- Status
-
vulnerable