Vulnerability · Published Mar 26, 2024 · Assigned by AppCheck
CVE-2024-29833WordPress Photo Gallery Plugin <= 1.8.21 Stored Cross Site Scripting in UploadHandler
Medium 5.4
In plain English
A medium-severity cross-site scripting in PhotoGallery from 10Web. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Official description
The image upload component allows SVG files and the regular expression used to remove script tags can be bypassed by using a Cross Site Scripting payload which does not match the regular expression; one example of this is the inclusion of whitespace within the script tag. An attacker must target an authenticated user with permissions to access this feature, however once uploaded the payload is also accessible to unauthenticated users.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| 10Web | PhotoGallery | 1.0.1 – through 1.8.21 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N