CVE-2021-24293

EUVD-2021-11207
In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_items via photocrati_ajax , after that the settings[shipping_address][name] is able to inject malicious javascript.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
Affected Products (NVD)
VendorProductVersion
imagelynextgen_gallery
𝑥
< 3.1.11
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://wpscan.com/vulnerability/5e1a4725-3d20-44b0-8a35-bbf4263957f7
https://www.imagely.com/wordpress-gallery-plugin/nextgen-pro/changelog/
https://wpscan.com/vulnerability/5e1a4725-3d20-44b0-8a35-bbf4263957f7
https://www.imagely.com/wordpress-gallery-plugin/nextgen-pro/changelog/