WordPress · Gb Gallery Slideshow · CVE-2021-24882
Name of the Vulnerable Software and Affected Versions:
Slideshow Gallery WordPress plugin versions prior to 1.7.4
Description:
The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping in the Slide `Title`, `Description`, and Gallery `Title` fields, even when the unfiltered html is disallowed.
Recommendations:
For versions prior to 1.7.4, update to version 1.7.4 or later to resolve the issue.