CVE-2021-24529

The Grid Gallery – Photo Image Grid Gallery WordPress plugin before 1.2.5 does not properly sanitize the title field for image galleries when adding them via the admin dashboard, resulting in an authenticated Stored Cross-Site Scripting vulnerability.

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.62% chance of exploitation in the next 30 days, 47th percentile

Published

2021-08-23

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/8953d931-19f9-4b73-991c-9c48db1af8b5

References

• CVE Record
• NVD entry

Related

• CVE-2021-24528
• CVE-2021-24530
• CVE-2021-24527
• CVE-2021-24533
• CVE-2021-24526
• CVE-2021-24534