Photo Gallery Slideshow & Masonry Tiled Gallery < 1.0.14 - Reflected Cross-Site Scripting

2023-04-2800:00:00

wpscan.com

plugin

vulnerability

cross-site scripting

EPSS

0.001

Percentile

46.2%

JSON

The plugin does not properly sanitize and escape the search_term parameter, leading to Reflected Cross-Site Scripting vulnerability.

References

www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-responsive-photo-gallery/photo-gallery-slideshow-masonry-tiled-gallery-1013-reflected-cross-site-scripting

EPSS

0.001

Percentile

46.2%

JSON

Related for WPVDB-ID:D6326AA5-C10C-491B-95B8-64B6FB52E4E0