CVE-2018-17946

The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-10-03

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Slideshow Gallery (Tribulant)

References

• http://www.defensecode.com/advisories/DC-2017-01-014_WordPress_Tribulant_Slideshow_Gallery_Plugin_Advisory.pdf
• https://wordpress.org/plugins/slideshow-gallery/#developers