CVE-2024-2744

4.3MEDIUM

The NextGEN Gallery WordPress plugin before 3.59.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even

发布于: 5/17/2024更新于: 5/21/2025
在NVD查看在MITRE查看

描述

The NextGEN Gallery WordPress plugin before 3.59.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

AI分析AI驱动

受影响产品

imagelynextgen_gallery

参考资料