CVE-2024-6870: Responsive Lightbox & Gallery <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in all versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping affecting the rluploadimage AJAX endpoint. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the 3gp2 file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6870?
CVE-2024-6870 is rated as a high severity vulnerability due to its potential for Stored Cross-Site Scripting attacks.
How do I fix CVE-2024-6870?
To fix CVE-2024-6870, you should update the Responsive Lightbox & Gallery plugin to version 2.4.8 or later.
Who is affected by CVE-2024-6870?
CVE-2024-6870 affects all versions of the Responsive Lightbox & Gallery plugin for WordPress up to and including 2.4.7.
What is exploited in CVE-2024-6870?
CVE-2024-6870 exploits insufficient input sanitization and output escaping in the rl_upload_image AJAX endpoint.
Can CVE-2024-6870 be exploited through file uploads?
Yes, CVE-2024-6870 can be exploited via file uploads due to vulnerabilities in the plugin's handling of uploaded files.