WordPress Plugin Vulnerabilities

Facebook Page Photo Gallery <= 2.0.9 - DOM Cross-Site Scripting (XSS)

Description

The facebook-page-photo-gallery WordPress plugin was affected by a DOM Cross-Site Scripting (XSS) security vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
facebook-page-photo-gallery
No known fix

References

URL
https://github.com/scaron/prettyphoto/issues/149

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
Yes
WPVDB ID
5b45a262-7063-42c8-b9b4-24eb2f421890

Timeline

Publicly Published
2015-05-06 (about 11 years ago)
Added
2015-05-06 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2020-04-15
Title
Widget Settings Importer/Exporter <= 1.5.3 - Authenticated Stored XSS
Published
2022-06-01
Title
Modern Events Calendar Lite < 6.3.0 - Authenticated Stored Cross-Site Scripting
Published
2025-04-25
Title
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) < 5.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-10-16
Title
Countdown Timer <= 1.0.5 - Contributor+ Stored XSS
Published
2024-11-08
Title
ra_qrcode <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting