WordPress Photo Gallery Slideshow & Masonry Tiled Gallery Plugin <= 1.0.13 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-41658

7.1HIGH

Key Information:

Vendor
WordPress
Status
Photo Gallery Slideshow & Masonry Tiled Gallery
Vendor
CVE Published:
29 September 2023

Summary

This vulnerability allows unauthenticated attackers to execute arbitrary scripts in the context of a user's browser session. An attacker can exploit this flaw to inject malicious scripts when victims interact with specially crafted links, potentially leading to data theft, session hijacking, or defacement of the affected site. Website owners using the I Thirteen Web Solution Photo Gallery plugin should update to secure their installations from such exploits.

Affected Version(s)

Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.13

References

https://patchstack.com/database/vulnerability/wp-responsi...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

yuyudhn (Patchstack Alliance)
.