| Package | Affected versions | Patched versions |
|---|---|---|
| image photo gallery final tiles grid | < 3.5.3 | 3.5.3 |
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free