Description (CNA)
Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| lightgalleryteam / LightGallery WP | affected 0 through 1.0.5 |
| tplugins / TP WooCommerce Product Gallery | affected 0 through 1.1.9 |
| vowelweb / Ibtana – WordPress Website Builder | affected 0 through 1.2.5.1 |
| wproyal / Royal Addons for Elementor – Addons and Templates Kit for Elementor | affected 0 through 1.7.1031 |
| wpsofts / Portfolio, Gallery, Product Catalog – Grid KIT Portfolio | affected 0 through 2.2.1 |
| famethemes / OnePress | affected 0 through 2.3.16 |
| galaxyweblinks / Gallery with thumbnail slider | affected 0 through 7.8 |
| oxilab / Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) | affected 0 through 9.10.5 |
CWE
CWE-79
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/acaa3142-2bbc-43d3-8ecc-05e8edb931ec?source=cve
- https://github.com/sachinchoolur/lightGallery
- https://plugins.trac.wordpress.org/changeset/3311382/
- https://plugins.trac.wordpress.org/changeset/3356089/
- https://plugins.trac.wordpress.org/changeset/3372141/
- https://plugins.trac.wordpress.org/changeset/3343557/
- https://themes.trac.wordpress.org/changeset/299860
ADP enrichment
No English description supplied.
No references supplied.