medium6.1
CVE-2018-17946
The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter.
Impact
The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tribulant | Slideshow Gallery | before 1.6.6.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.defensecode.com/advisories/DC-2017-01-014_WordPress_Tribulant_Slideshow_Gallery_Plugin_Advisory.pdf
- https://wordpress.org/plugins/slideshow-gallery/#developers
- http://www.defensecode.com/advisories/DC-2017-01-014_WordPress_Tribulant_Slideshow_Gallery_Plugin_Advisory.pdf
- https://wordpress.org/plugins/slideshow-gallery/#developers