Photoxhibit <= 2.1.8 - Reflected Cross-Site Scripting via gid
mediumReflected XSS in wordpress plugin photoxhibit v2.1.8 via 'gid' parameter
- CVSS:
- 6.1
- Affected:
- up to 2.1.8
- Fix:
- No patched version reported
- Disclosed:
- Oct 10, 2016
plugin
4 known security issues reported for the Photoxhibit WordPress plugin. Most recent disclosed Oct 10, 2016.
Running Photoxhibit on your site? Check whether your installed version is affected.
Scan your site freeReflected XSS in wordpress plugin photoxhibit v2.1.8 via 'gid' parameter
[en] Reflected XSS in wordpress plugin photoxhibit v2.1.8
[en] Reflected XSS in wordpress plugin photoxhibit v2.1.8
The Photoxhibit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'gid' parameter in the ‘edit_styles.php’ file in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scri...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free