| Package | Affected versions | Patched versions |
|---|---|---|
| lazyest-gallery | = 1.1= 1.1.1= 1.1.1.1= 1.1.10= 1.1.10.1= 1.1.11= 1.1.12= 1.1.13= 1.1.14= 1.1.15= 1.1.16= 1.1.17.1= 1.1.17.2= 1.1.17.4= 1.1.18= 1.1.19= 1.1.19.1= 1.1.2.1= 1.1.3= 1.1.3.1= 1.1.3.2= 1.1.3.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.7.1= 1.1.8= 1.1.8.1= 1.1.9= 1.1.9.1≤ 1.1.20 |
Cross-site scripting (XSS) vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attackers to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free