Medium severity6.1NVD Advisory· Published May 5, 2021· Updated Jun 17, 2026
CVE-2021-24293
CVE-2021-24293
Description
In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_items via photocrati_ajax , after that the settings[shipping_address][name] is able to inject malicious javascript.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<3.1.11+ 1 more
- (no CPE)range: <3.1.11
- (no CPE)range: <3.1.11
Patches
Vulnerability mechanics
References
2- wpscan.com/vulnerability/5e1a4725-3d20-44b0-8a35-bbf4263957f7nvdExploitThird Party Advisory
- www.imagely.com/wordpress-gallery-plugin/nextgen-pro/changelog/nvdVendor Advisory
News mentions
0No linked articles in our index yet.