VULNERABILITY INTELLIGENCE

CVE-2015-2324

CVSS score5.4 MEDIUM
EPSS probability0.86%
CISA KEVNot currently listed
Published2018-02-19
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Cross-site scripting (XSS) vulnerability in the filemanager in the Photo Gallery plugin before 1.2.13 for WordPress allows remote authenticated users with edit permission to inject arbitrary web script or HTML via unspecified vectors.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references