CVE-2024-29833: WordPress Photo Gallery Plugin <= 1.8.21 Stored Cross Site Scripting in UploadHandler
The image upload component allows SVG files and the regular expression used to remove script tags can be bypassed by using a Cross Site Scripting payload which does not match the regular expression; one example of this is the inclusion of whitespace within the script tag. An attacker must target an authenticated user with permissions to access this feature, however once uploaded the payload is also accessible to unauthenticated users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29833?
CVE-2024-29833 is classified as a medium severity vulnerability due to its potential for Cross Site Scripting attacks.
How do I fix CVE-2024-29833?
To mitigate CVE-2024-29833, update the WordPress Photo Gallery Plugin to the latest version beyond 1.8.21.
What type of attacks can be executed due to CVE-2024-29833?
CVE-2024-29833 allows attackers to perform Cross Site Scripting attacks by uploading malicious SVG files.
Which versions of the WordPress Photo Gallery Plugin are affected by CVE-2024-29833?
CVE-2024-29833 affects the WordPress Photo Gallery Plugin version 1.8.21 and earlier.
How does CVE-2024-29833 bypass security measures?
CVE-2024-29833 bypasses security measures by exploiting a regular expression that fails to account for whitespace in script tag payloads.