Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101673
HistoryDec 19, 2021 - 12:00 a.m.

WordPress Simple Image Gallery plugin cross-site scripting vulnerability

2021-12-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
image gallery
cross-site scripting
vulnerability
php
mysql

EPSS

0.001

Percentile

30.0%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. simple Image Gallery plugin is a WordPress open source application plugin. the WordPress Simple Image Gallery plugin has a cross-site scripting vulnerability that originates in ~/simple-image- gallery.php’s msg parameter lacks a checksum filter for user-supplied data and output data. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

30.0%

Related for CNVD-2021-101673