photo-gallery Plugin up to 1.5.34 on WordPress Options.php cross site scripting

Summaryinfo

A vulnerability, which was classified as problematic, was found in photo-gallery Plugin up to 1.5.34 on WordPress. This affects an unknown function of the file admin/controllers/Options.php. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2019-16118. The attack can be launched remotely. Moreover, an exploit is present. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in photo-gallery Plugin up to 1.5.34 on WordPress (Photo Gallery Software). Affected is some unknown functionality of the file admin/controllers/Options.php. The manipulation with an unknown input leads to a cross site scripting vulnerability. CWE is classifying the issue as CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. This is going to have an impact on integrity. CVE summarizes:

Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php.

The weakness was disclosed 09/08/2019. This vulnerability is traded as CVE-2019-16118 since 09/08/2019. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Successful exploitation requires user interaction by the victim. Technical details and a public exploit are known. This vulnerability is assigned to T1059.007 by the MITRE ATT&CK project.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept. By approaching the search of inurl:admin/controllers/Options.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 1.5.35 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Exploit-DB (47373). The entries VDB-141401 and VDB-141403 are pretty similar. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Photo Gallery Software

Name

• photo-gallery Plugin

Version

• 1.5.0
• 1.5.1
• 1.5.2
• 1.5.3
• 1.5.4
• 1.5.5
• 1.5.6
• 1.5.7
• 1.5.8
• 1.5.9
• 1.5.10
• 1.5.11
• 1.5.12
• 1.5.13
• 1.5.14
• 1.5.15
• 1.5.16
• 1.5.17
• 1.5.18
• 1.5.19
• 1.5.20
• 1.5.21
• 1.5.22
• 1.5.23
• 1.5.24
• 1.5.25
• 1.5.26
• 1.5.27
• 1.5.28
• 1.5.29
• 1.5.30
• 1.5.31
• 1.5.32
• 1.5.33
• 1.5.34

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion