CVE-2022-1946

MEDIUMNuclei

Gallery < 2.0.0 - Reflected Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-1946 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting issue

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Gallery – Image and Video Gallery with Thumbnails

CVE List2.0.0 to < 2.0.0affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Gallery <2.0.0 - Cross-Site ScriptingCVSS 6.1

WordPress Gallery plugin before 2.0.0 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape a parameter before outputting it back in the response of an AJAX action, available to both unauthenticated and authenticated users.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into the website, leading to potential data theft, session hijacking, or defacement.

Remediation

Update the WordPress Gallery plugin to version 2.0.0 or later to mitigate the vulnerability.

WeaknessesCWE-79
AuthorsAkincibor
Template tagscvecve2022wpscanwpxsswordpressgalleryunauthwp-pluginwpdevartvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:wpdevart:gallery:*:*:*:*:*:wordpress:*:*
Google: inurl:"/wp-content/plugins/gallery-album/"
https://wpscan.com/vulnerability/0903920c-be2e-4515-901f-87253eb30940 https://wordpress.org/plugins/gallery-album https://nvd.nist.gov/vuln/detail/CVE-2022-1946 https://github.com/ARPSyndicate/kenzer-templates https://github.com/cyllective/CVEs

Source: ProjectDiscovery

References

2