PT-2020-20422 · WordPress · Modula Image Gallery

Published 2020-02-20 · Updated 2025-12-15 · CVE-2020-9003

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Modula Image Gallery plugin versions prior to 2.2.5

Description A stored XSS issue exists, allowing an authenticated low-privileged user to inject arbitrary JavaScript code that is viewed by other users. This enables the execution of malicious scripts within the context of the affected application.

Recommendations For versions prior to 2.2.5, update to version 2.2.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality for low-privileged users until the update is applied.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-9003

Affected Products

Modula Image Gallery

References · 8

• https://osv.dev/vulnerability/CVE-2020-9003 · Vendor Advisory
• https://wordpress.org/plugins/modula-best-grid-gallery · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9003 · Security Note
• https://github.com/MachoThemes/modula-lite/blob/master/changelog.txt · Note
• https://wpvulndb.com/vulnerabilities/10077 · Note
• https://t.me/cvenotify/1120 · Telegram Post
• https://t.me/cveNotify/145767 · Telegram Post
• https://fortiguard.com/zeroday/FG-VD-20-041 · Note