CVE-2014-2333

LOW 2.6CVE-2014-2333 · Published 11/04/2014 · updated 17/06/2026

In short

CVE-2014-2333 is a LOW (CVSS 2.6) vulnerability affecting lazyest-gallery (marcel brinkkemper).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
lazyest-gallery marcel_brinkkemper	`= 1.1= 1.1.1= 1.1.1.1= 1.1.10= 1.1.10.1= 1.1.11= 1.1.12= 1.1.13= 1.1.14= 1.1.15= 1.1.16= 1.1.17.1= 1.1.17.2= 1.1.17.4= 1.1.18= 1.1.19= 1.1.19.1= 1.1.2.1= 1.1.3= 1.1.3.1= 1.1.3.2= 1.1.3.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.7.1= 1.1.8= 1.1.8.1= 1.1.9= 1.1.9.1≤ 1.1.20`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attackers to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/57746 · Vendor Advisory
wordpress.org/plugins/lazyest-gallery/changelog · Vendor Advisory
securityfocus.com/bid/66756
exchange.xforce.ibmcloud.com/vulnerabilities/92598

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free