Portfolio Responsive Gallery Vulnerabilities

[en] The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Gallery WordPress plugin before 1.1.8 did not use whitelist or validate the orderby parameter bef...

Affected:

up to 1.1.8

Fixed in:

1.1.8

Disclosed:

Aug 2, 2021

CVE-2021-24457 on NVD →

The get_portfolios() and get_portfolio_attributes() functions in the class-portfolio-responsive-gallery-list-table.php and class-portfolio-responsive-gallery-attributes-list-table.php files of the Portfolio Responsive Gallery WordPress plugin before 1.1.8 did not use whitelist or validate the orderby parameter before u...

CVSS:

8.8

Affected:

up to 1.1.7

Fixed in:

1.1.8

Disclosed:

Jun 29, 2021

CVE-2021-24457 on NVD →

The Portfolio Responsive Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters in versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages t...

CVSS:

6.1

Affected:

up to 1.1.7

Fixed in:

1.1.8

Disclosed:

Jun 29, 2021

The Portfolio Responsive Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters in versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages t...

Affected:

up to 1.1.8

Fixed in:

1.1.8

Disclosed:

Jun 29, 2021

The plugins did not properly sanitise and escape some GET parameters before outputting them back in attributes, leading to reflected Cross-Site Scripting issues which will be executed in the context of a logged in administrator

Affected:

up to 1.1.8

Fixed in:

1.1.8