Photos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site Scripting

Proof of Concept

1. Add a New gallery, and click on the "Add files" button to add content.
2. Now add a description for this content with the XSS payload and save the changes: <script>alert('XSS');</script>
3. Click on the "cg_gallery_no_voting" that redirects to the page to display the content. It will appear in the pop-up alert.