Unrated severityNVD Advisory· Published Feb 21, 2022· Updated Aug 2, 2024
Image Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting
CVE-2022-0186
Description
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <3.5.3
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/3a9c44c0-866e-4fdf-b53d-666db2e11720mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.