Medium severity4.8NVD Advisory· Published Jun 27, 2022· Updated Jun 17, 2026

CVE-2022-1327

Description

The Image Gallery WordPress plugin before 1.1.6 does not sanitize and escape some of its Image fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Image Gallerycpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <1.1.6
Package: https://wordpress.org/plugins/image-gallery

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/6b71eb38-0a4a-49d1-96bc-84bbe675be1envdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000