Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-24903
HistoryFeb 28, 2022 - 9:15 a.m.

Cross site scripting

2022-02-2809:15:00
PRIOn knowledge base
www.prio-n.com
1

0.001 Low

EPSS

Percentile

24.8%

The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when the unfiltered_html capability is disallowed.

CPENameOperatorVersion
grand_flagalleryle6.1.2

0.001 Low

EPSS

Percentile

24.8%