The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
History

Sat, 23 Nov 2024 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Wordfence

Published: 2023-06-09T05:33:17.761Z

Updated: 2024-11-23T13:18:22.483Z

Reserved: 2023-04-28T14:00:39.558Z

Link: CVE-2023-2402

cve-icon Vulnrichment

Updated: 2024-08-02T06:19:15.113Z

cve-icon NVD

Status : Modified

Published: 2023-06-09T06:16:06.847

Modified: 2024-11-21T07:58:32.823

Link: CVE-2023-2402

cve-icon Redhat

No data.