CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
What the vulnerability does
The image upload component allows SVG files and the regular expression used to remove script tags can be bypassed by using a Cross Site Scripting payload which does not match the regular expression; one example of this is the inclusion of whitespace within the script tag. An attacker must target an authenticated user with permissions to access this feature, however once uploaded the payload is also accessible to unauthenticated users.
Explanation of Vulnerability in Simple Terms
PhotoGallery versions 1.0.1 through 1.8.21 contain a stored cross-site scripting (XSS) vulnerability. An authenticated user with low privileges can inject malicious scripts that execute in the browsers of other users viewing the gallery. The vulnerability requires user interaction—the victim must visit a page containing the injected content. The impact is limited to session hijacking or credential theft within the site.
What an attacker can do
Inject malicious scripts that run in other users' browsers when they view the gallery.
Potential impact on your site
Users' sessions or credentials could be stolen if they view galleries containing injected scripts.
Conditions required to exploit
Attacker must have a low-privilege account on the site; victim must visit a page with the injected content.
Key dates
External resources
Related vulnerabilities
