CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
What the vulnerability does
The thumb_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the thumb_url parameter is embedded within an existing JavaScript within the response allowing arbitrary JavaScript to be inserted and executed. The attacker must target a an authenticated user with permissions to access this component to exploit this issue.
Explanation of Vulnerability in Simple Terms
PhotoGallery versions 1.0.1 through 1.8.21 contain a cross-site scripting (XSS) vulnerability that allows an authenticated user to inject malicious scripts. The vulnerability requires user interaction and affects the scope beyond the vulnerable component. An attacker with low-level access can craft a malicious request to inject code that executes in other users' browsers.
What an attacker can do
Inject malicious scripts that execute in other users' browsers when they interact with the plugin.
Potential impact on your site
Authenticated users can inject scripts affecting other site visitors; impacts confidentiality and integrity of user sessions.
Conditions required to exploit
Attacker must have low-level user account access and the victim must click a link or visit a page.
Key dates
External resources
Related vulnerabilities
