CVE-2021-24291

MEDIUMNuclei

Photo Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24291 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.69 was vulnerable to Reflected Cross-Site Scripting (XSS) issues via the gallery_id, tag, album_id and _id GET parameters passed to the bwg_frontend_data AJAX action (available to both unauthenticated and authenticated users)

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Photo Gallery by 10Web – Mobile-Friendly Image Gallery

Browse Photo Gallery Team / Photo Gallery by 10Web – Mobile-Friendly Image Gallery
CVE List1.5.69 to < 1.5.69affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Photo Gallery by 10Web <1.5.69 - Cross-Site ScriptingCVSS 6.1

WordPress Photo Gallery by 10Web plugin before 1.5.69 contains multiple reflected cross-site scripting vulnerabilities via the gallery_id, tag, album_id and theme_id GET parameters passed to the bwg_frontend_data AJAX action, available to both unauthenticated and authenticated users.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.

Remediation

Update WordPress Photo Gallery by 10Web to version 1.5.69 or later to mitigate the vulnerability.

WeaknessesCWE-79
Authorsgeeknik
Template tagscve2021cvephotowpscanpacketstormxsswordpresswp-plugin10webvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:10web:photo_gallery:*:*:*:*:*:wordpress:*:*
Shodan: http.html:/wp-content/plugins/photo-gallery
FOFA: body=/wp-content/plugins/photo-gallery
https://wpscan.com/vulnerability/cfb982b2-8b6d-4345-b3ab-3d2b130b873a https://packetstormsecurity.com/files/162227/ https://nvd.nist.gov/vuln/detail/CVE-2021-24291

Source: ProjectDiscovery

References

3