CVE-2024-10102: Photo Gallery, Images, Slider in Rbs Image Gallery < 3.2.22 - Contributor+ Stored XSS
The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its Gallery settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10102?
CVE-2024-10102 is classified as a high severity vulnerability due to the potential for stored cross-site scripting attacks by high privilege users.
How do I fix CVE-2024-10102?
To remediate CVE-2024-10102, update the Rbs Image Gallery WordPress plugin to version 3.2.22 or later which addresses the sanitization and escaping issues.
Who is affected by CVE-2024-10102?
CVE-2024-10102 affects users of the Rbs Image Gallery WordPress plugin prior to version 3.2.22, especially those with high privilege roles like contributors.
What types of attacks can CVE-2024-10102 enable?
CVE-2024-10102 enables stored cross-site scripting (XSS) attacks, allowing malicious scripts to be executed in the context of other users.
What should I do if I cannot update to fix CVE-2024-10102?
If an update is not possible for CVE-2024-10102, consider disabling the affected Rbs Image Gallery plugin until a secure version can be installed.