CVE-2024-29832

CVSS V2 None CVSS V3 None

Description

The current_url parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the current_url parameter is embedded within an existing JavaScript within the response allowing arbitrary JavaScript to be inserted and executed. No authentication is required to exploit this issue. Note that other parameters within a AJAX call, such as image_id, must be valid for this vulnerability to be successfully exploited.

Overview

CVE ID
CVE-2024-29832

Assigner
AppCheck

Vulnerability Status
PUBLISHED

Published Version
2024-03-26T15:24:24.084Z

Last Modified Date
2024-03-26T15:24:24.084Z

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html

References

Reference URL	Reference Tags
https://appcheck-ng.com/xss-vulnerabilities-discovered-10web-photogallery-wordpress-plugin/
https://wordpress.org/plugins/photo-gallery/#developers

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-29832
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29832

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 02:18:50				Added to TrackCVE