PT-2024-23072 · 10Web+1 · Photo Gallery

Appcheck Ltd + 1 · Published 2024-03-26 · Updated 2024-08-02 · CVE-2024-29833

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The image upload component is affected by an issue where it allows SVG files, and the regular expression used to remove script tags can be bypassed. This can be done by using a Cross Site Scripting payload that does not match the regular expression, such as including whitespace within the script tag. An attacker must target an authenticated user with permissions to access this feature. However, once the payload is uploaded, it becomes accessible to unauthenticated users as well.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-29833

Affected Products

Photo Gallery

References · 6

• 🔥 https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin · Exploit
• https://osv.dev/vulnerability/CVE-2024-29833 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29833 · Security Note
• https://wordpress.org/plugins/photo-gallery/#developers · Note
• https://twitter.com/CVEnew/status/1772652982540407035 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1772696374510846401 · Twitter Post