Cross-site Scripting Vulnerability in Contest Gallery by Contest Gallery Plugin

CVE-2024-56237

What is CVE-2024-56237?

A vulnerability exists within the Contest Gallery Plugin that allows for improper neutralization of input during web page generation, leading to a Stored Cross-site Scripting (XSS) issue. This security flaw can potentially allow attackers to inject malicious scripts into web pages viewed by users, compromising user data and session integrity. The vulnerability affects various versions of the plugin, specifically from n/a to 24.0.3, underscoring the importance of timely updates and patches to safeguard web applications from exploitation.

References