WordPress Plugin Vulnerabilities

Gallery - Video Gallery <= 1.7.01 - Stored Cross-Site Scripting (XSS)

Description

The gallery-video WordPress plugin was affected by a Video Gallery <= 1.7.01 - Stored Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
gallery-video
Fixed in 1.7.02

References

URL
https://web.archive.org/web/20170703193354/http://www.rootlabs.com.br/stored-xss-huge-it-video-gallery-plugin/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
Oliveira Lima
Submitter twitter
@oliveiralimajr
Verified
No
WPVDB ID
ef5ade7d-c979-497d-ab98-00e41693271e

Timeline

Publicly Published
2016-05-28 (about 9 years ago)
Added
2016-05-30 (about 9 years ago)
Last Updated
2020-04-12 (about 6 years ago)

Other

Published
Title
Published
2025-07-16
Title
JetWooBuilder < 2.1.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2021-09-06
Title
ELEX WooCommerce Google Shopping < 1.2.4 - Reflected Cross-Site Scripting (XSS)
Published
2024-08-01
Title
Filter & Grids < 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2023-11-03
Title
Layer Slider <= 1.1.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2024-10-25
Title
Monkee-Boy Essentials <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload