CVE-2022-0186
21.02.2022, 11:15
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard
| Vendor | Product | Version |
|---|---|---|
| machothemes | image_photo_gallery_final_tiles_grid | 𝑥 < 3.5.3 |
𝑥
= Vulnerable software versions