Stored Cross-Site Scripting in Simple Gallery with Filter Plugin for WordPress
CVE-2024-13583
6.4MEDIUM
What is CVE-2024-13583?
The Simple Gallery with Filter plugin for WordPress is susceptible to Stored Cross-Site Scripting (XSS) due to inadequate input sanitization and output escaping. The vulnerability exists in the plugin's 'c2tw_sgwf' shortcode, allowing authenticated users with contributor-level permissions and above to inject malicious scripts into pages. This leads to the potential execution of arbitrary web scripts when a user accesses the compromised page, posing risks to both site integrity and user security.
Affected Version(s)
Simple Gallery with Filter * <= 2.0