Grid Gallery < 1.2.5 – Authenticated Stored Cross Site Scripting (XSS) | CVE 2021-24529 | Plugin Vulnerabilities

Description

The plugin does not properly sanitize the title field for image galleries when adding them via the admin dashboard, resulting in an authenticated Stored Cross-Site Scripting vulnerability.

Proof of Concept

Step 1: Install Grid Gallery - Photo Image Grid Gallery plugin in word press and activate the plugin.
Step 2: Click on add grid gallery there is a title field.
Step 3: select a photo and inject malicious JavaScript in title field and save to draft and preview it.
Step 4: XSS payload will render.

https://drive.google.com/file/d/1A-WI_Ma7p-4FZ8KqgHAHnkiaCNZU5OFn/view?usp=sharing

Affects Plugins

new-grid-gallery

Fixed in 1.2.5

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Amal E Thamban

Submitter

Amal E Thamban

Submitter twitter

Verified

Yes

WPVDB ID

8953d931-19f9-4b73-991c-9c48db1af8b5

Timeline

Publicly Published

2021-07-21 (about 4 years ago)

Added

2021-07-21 (about 4 years ago)

Last Updated

2021-08-10 (about 4 years ago)

Other

Published

Title

Published

2025-06-23

Title

MagOne <= 8.5 - Reflected Cross-Site Scripting

Published

2024-07-19

Title

Post and Page Builder by BoldGrid – Visual Drag and Drop Editor < 1.26.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via File Upload

Published

2014-08-01

Title

fGallery_Plus - fim_rss.php album Parameter Reflected XSS

Published

2023-08-28

Title

Popup Builder < 4.2.0 - Admin+ Stored Cross-Site Scripting

Published

2021-08-13

Title

Skaut bazar < 1.3.3 - Reflected Cross-Site Scripting