Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 30/08/2021 Updated: 03/09/2021

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox (Version – 2.2.0 & below). The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of image parameters in meta data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
simplygallery simply gallery blocks with lightbox

CWE-79 https://www.fortiguard.com/zeroday/FG-VD-21-060 https://wpscan.com/vulnerability/5925b263-6d6f-4a03-a98a-620150dff8f7 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-24667

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect