The NextGEN Gallery WordPress plugin... CVE-2024-2744

- AV AC AU C I A
发布: 2025-04-13
修订: 2025-04-13

The NextGEN Gallery WordPress plugin before 3.59.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

0%
暂无可用Exp或PoC
当前有0条受影响产品信息