Photo Gallery, Images, Slider in Rbs Image Gallery, CVE-2024-3896

CVE, Research URL: CVE-2024-3896
Home page URL: Security reports for Photo Gallery, Images, Slider in Rbs Image Gallery
Application: Photo Gallery, Images, Slider in Rbs Image Gallery
Published on: Jul 24, 2024
Research Description: The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the Gallery title field in all versions up to, and including, 3.2.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: Min -, max 3.2.20.
Status: vulnerable