CVE-2024-12096

6.1MEDIUM

The Exhibit to WP Gallery WordPress plugin through 0.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used

Published: 12/24/2024Updated: 5/14/2025
View on NVDView on MITRE

Description

The Exhibit to WP Gallery WordPress plugin through 0.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

AI AnalysisPowered by AI

Affected Products

ulfbenexhibit_to_wp_gallery

References