WordPress Plugin Vulnerabilities

Flickr Justified Gallery < 3.4.0 - Reflected Cross-Site Scripting (XSS)

Description

The Flickr Justified Gallery WordPress plugin was affected by a Reflected Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
flickr-justified-gallery
Fixed in 3.4.0

References

CVE
CVE-2015-9327
URL
https://packetstormsecurity.com/files/#132867/
URL
https://advisories.dxw.com/advisories/reflected-xss-in-flickr-justified-gallery-could-allows-unauthenticated-attackers-to-do-almost-anything-an-admin-can-do/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
ee6457da-f775-40f8-8781-45158e18f996

Timeline

Publicly Published
2015-07-28 (about 10 years ago)
Added
2015-07-28 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-03-11
Title
GNUPress <= 0.2.9 - Reflected Cross-Site Scripting
Published
2025-08-14
Title
Print My Blog < 3.27.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2022-06-10
Title
Age Gate < 2.17.1 - Unauthenticated Stored Cross-Site Scripting
Published
2024-06-27
Title
Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery < 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via galleryID and className Parameters
Published
2024-04-09
Title
Bold Page Builder < 4.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element