CVE-2024-1487: Photos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site Scripting
The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1487?
CVE-2024-1487 is considered to have a moderate severity rating due to its potential for Cross-Site Scripting attacks.
How do I fix CVE-2024-1487?
To fix CVE-2024-1487, you should update the Photos and Files Contest Gallery WordPress plugin to version 21.3.1 or later.
Who is affected by CVE-2024-1487?
Users with a role as low as author on WordPress sites using the vulnerable plugin are at risk from CVE-2024-1487.
What type of vulnerability is CVE-2024-1487?
CVE-2024-1487 is a Cross-Site Scripting (XSS) vulnerability that arises from inadequate parameter sanitization and escaping.
What versions of the Photos and Files Contest Gallery plugin are vulnerable to CVE-2024-1487?
Versions of the Photos and Files Contest Gallery plugin prior to 21.3.1 are vulnerable to CVE-2024-1487.