The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS code later on in another page, which could lead to Stored XSS issue when an attacker makes a logged in admin open a malicious URL or page under their control.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/89656cb3-4611-4ae7-b7f8-1b22eb75cfc4 | Exploit Third Party Advisory |
Configurations
History
07 Nov 2023, 03:56
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-352 |
22 Dec 2022, 21:45
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
First Time |
10web
10web photo Gallery |
|
References | (MISC) https://wpscan.com/vulnerability/89656cb3-4611-4ae7-b7f8-1b22eb75cfc4 - Exploit, Third Party Advisory | |
CPE | cpe:2.3:a:10web:photo_gallery:*:*:*:*:*:wordpress:*:* |
19 Dec 2022, 14:18
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-12-19 14:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-4058
Mitre link : CVE-2022-4058
CVE.ORG link : CVE-2022-4058
JSON object : View
Products Affected
10web
- photo_gallery
CWE
No CWE.