CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Reflected XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.
Explanation of Vulnerability in Simple Terms
Responsive Image Gallery and Gallery Album versions up to 2.0.3 contain a stored cross-site scripting (XSS) vulnerability. An attacker can inject malicious scripts into gallery content that execute in the browsers of site visitors. The vulnerability affects the scope beyond the vulnerable component, potentially compromising user sessions and data. Site administrators should update to a version newer than 2.0.3.
What an attacker can do
Inject malicious scripts into gallery content that run in visitors' browsers and steal session data or perform actions on their behalf.
Potential impact on your site
Visitor accounts and data at risk; attackers can steal credentials, redirect users, or deface content without your knowledge.
Conditions required to exploit
No authentication required. A visitor must view a page containing the compromised gallery.
Key dates
External resources
Related vulnerabilities
