CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery allows Stored XSS.This issue affects Photo Gallery, Images, Slider in Rbs Image Gallery: from n/a through 3.2.17.
Explanation of Vulnerability in Simple Terms
Rbs Image Gallery versions up to 3.2.17 contain a stored cross-site scripting (XSS) vulnerability. An authenticated administrator with high privileges can inject malicious scripts into gallery content. When other users view the affected gallery, the injected code executes in their browsers, potentially stealing session data or performing actions on their behalf.
What an attacker can do
Inject malicious scripts that execute when other users view the gallery.
Potential impact on your site
Compromised admin accounts can inject persistent malicious code affecting all site visitors who view galleries.
Conditions required to exploit
Attacker must have high-level admin privileges and a user must view the affected gallery content.
Key dates
External resources
Related vulnerabilities
