CVE-2021-24529

MEDIUM 5.4CVE-2021-24529 · Published 23/08/2021 · updated 17/06/2026

In short

CVE-2021-24529 is a MEDIUM (CVSS 5.4) vulnerability affecting grid gallery (awplife).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.7% of all vulnerabilities.
Fix: update to 1.2.5 or later.

Package	Affected versions	Patched versions
grid gallery awplife	`< 1.2.5`	`1.2.5`

Description

The Grid Gallery – Photo Image Grid Gallery WordPress plugin before 1.2.5 does not properly sanitize the title field for image galleries when adding them via the admin dashboard, resulting in an authenticated Stored Cross-Site Scripting vulnerability.

References

wpscan.com/vulnerability/8953d931-19f9-4b73-991c-9c48db1af8b5 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free