CVE-2021-24529 | BDVDB-2026-159294 Detail

Grid Gallery – Photo Image Grid Gallery

Description#

The Grid Gallery – Photo Image Grid Gallery WordPress plugin before 1.2.5 does not properly sanitize the title field for image galleries when adding them via the admin dashboard, resulting in an authenticated Stored Cross-Site Scripting vulnerability.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/8953d931-19f9-4b73-991c-9c48db1af8b5

Exploit#

No public exploit known

History#

Version 12021-08-23Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.