Vulnerabilities > Justified Gallery Project

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-30	CVE-2022-4651	Cross-site Scripting vulnerability in Justified Gallery Project Justified Gallery The Justified Gallery WordPress plugin before 1.7.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. network low complexity justified-gallery-project CWE-79	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.

Vulnerabilities > Justified Gallery Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Justified Gallery Project"}]}

Vulnerabilities > Justified Gallery Project