WordPress Plugin Vulnerabilities

ACF Photo Gallery Field < 1.7.5 - Reflected Cross-Site Scripting

Description

The plugin does not sanitise and escape the post parameter in the includes/acf_photo_gallery_metabox_edit.php file before outputing back in an attribute, leading to a Reflected Cross-Site Scripting issue

Proof of Concept

https://example.com/wp-content/plugins/navz-photo-gallery/includes/acf_photo_gallery_metabox_edit.php?post=%22%3E%3Cimg/src/onerror=alert(/XSS/)%3E

Affects Plugins

navz-photo-gallery

Fixed in version 1.7.5

References

CVE

CVE-2021-24909

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CWE-79

Miscellaneous

Original Researcher

Krzysztof Zając

Verified

Yes

WPVDB ID

5855f1fe-28f6-4cd6-a83c-95c23d809b79

Timeline

Publicly Published

2021-12-20 (about 1 years ago)

Added

2021-12-20 (about 1 years ago)

Last Updated

2022-04-13 (about 9 months ago)

Our Other Services

WPScan WordPress Security Plugin