Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More, 1c2d20b2-12c7-44b9-9bb2-005ef81f8d10
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More [gs-team-members] < 2.2.4 GS Team Members < 2.2.4 - Contributor+ Stored XSS The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin
- Affected versions
-
max 2.2.4.
- Status
-
vulnerable