WordPress Plugin Vulnerabilities

WordPress Gallery Plugin 1.0 - Authenticated Stored Cross-Site Scripting (XSS)

Description

The plugin is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the Image Label Name input.

Affects Plugins

Plugin icon
rocket-responsive-gallery
Fixed in 1.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
Arash Khazaei
Submitter twitter
0xClay
Verified
No
WPVDB ID
d2e26fef-d309-49f3-aee5-e29846bb89ac

Timeline

Publicly Published
2015-08-17 (about 10 years ago)
Added
2015-08-24 (about 10 years ago)
Last Updated
2015-12-20 (about 10 years ago)

Other

Published
Title
Published
2024-11-08
Title
Embed documents shortcode <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-03-25
Title
SH Email Alert <= 1.0 - Reflected Cross-Site Scripting
Published
2025-01-29
Title
Simple:Press Forum < 6.10.12 - Reflected Cross-Site Scripting
Published
2025-01-07
Title
Button Block < 1.2.0 - Contributor+ Stored XSS
Published
2025-08-06
Title
Porn Videos Embed <= 0.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting