Description
WordPress Plugin Simply Gallery Blocks存在XSS漏洞。该漏洞是由于media-new.php对用户输入的数据校验不足导致的。
WordPress Plugin Simply Gallery Blocks CVE-2021-24667 XSS漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://wpscan.com/vulnerability/5925b263-6d6f-4a03-a98a-620150dff8f7
https://avd.aquasec.com/nvd/2021/cve-2021-24667/
https://www.cve.org/CVERecord?id=CVE-2021-24667
https://jvndb.jvn.jp/ja/contents/2021/JVNDB-2021-011501.html
https://www.fortiguard.com/zeroday/FG-VD-21-060
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/simply-gallery-block
https://acunetix.com/vulnerabilities/web/wordpress-plugin-gallery-blocks-with-lightbox-image-gallery-html5-video-youtube-vimeo-video-gallery-and-lightbox-for-native-gallery-cross-site-scripting-2-2-0/
https://vulnerability.circl.lu/search?product=simply_gallery_blocks_with_lightbox&vendor=simplygallery
https://app.opencve.io/cve/?product=simply_gallery_blocks_with_lightbox&vendor=simplygallery
https://nvd.nist.gov/vuln/detail/CVE-2021-24667