Unrated severityNVD Advisory· Published Jun 21, 2020· Updated Aug 4, 2024

CVE-2020-14962

Description

Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Title (aka imageTitle) or Caption (aka description) field of an image to wp-admin/admin-ajax.php.

Affected products

WordPress/Final Tiles Gallery plugindescription
WordPress/Final Tiles Grid Gallery Litellm-create
Range: <3.4.19
Package: https://wordpress.org/plugins/final-tiles-grid-gallery-lite

Patches

Vulnerability mechanics

References

wpvulndb.com/vulnerabilities/10241mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000