CVE-2022-4058
Photo Gallery < 1.8.3 - Stored XSS via CSRF
- State
- Published
- Severity
- Not scored
- Published
- Dec 19, 2022
- Updated
- Aug 3, 2024
- Reserved
- Nov 18, 2022
Description
The Photo Gallery by 10Web WordPress plugin before 1.8.3 does not validate and escape some parameters before outputting them back in in JS code later on in another page, which could lead to Stored XSS issue when an attacker makes a logged in admin open a malicious URL or page under their control.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Photo Gallery by 10WebUnknown |
|
References
- https://wpscan.com/vulnerability/89656cb3-4611-4ae7-b7f8-1b22eb75cfc4exploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.