Vulnerabilities > CVE-2024-34759 - Unspecified vulnerability in Videowhisper Picture Gallery

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

videowhisper

NVD

Published: 2024-06-04

Updated: 2024-11-21

Summary

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in VideoWhisper Picture Gallery allows Stored XSS.This issue affects Picture Gallery: from n/a through 1.5.11.

Vulnerable Configurations

Part	Description	Count
Application	Videowhisper Videowhisper Picture Gallery - Videowhisper Picture Gallery 1.1 Videowhisper Picture Gallery 1.2 Videowhisper Picture Gallery 1.3 Videowhisper Picture Gallery 1.4 Videowhisper Picture Gallery 1.5 Videowhisper Picture Gallery 1.5.11	7

References

https://patchstack.com/database/vulnerability/picture-gallery/wordpress-picture-gallery-plugin-1-5-11-cross-site-scripting-xss-vulnerability?_s_id=cve
https://patchstack.com/database/vulnerability/picture-gallery/wordpress-picture-gallery-plugin-1-5-11-cross-site-scripting-xss-vulnerability?_s_id=cve