cbcvebase.

Codeasily Gmedia Gallery vulnerabilities

1 known vulnerability affecting codeasily/gmedia_gallery.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2022-0873P4MEDIUMCVSS 4.8PoCfixed in 1.20.02022-05-16
CVE-2022-0873 [MEDIUM] CWE-79 CVE-2022-0873: The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's nam The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed
nvd
Codeasily Gmedia Gallery vulnerabilities | cvebase