10Web 的照片库 < 1.8.31 - Admin+ 存储型 XSS (CVE-2024-10704)
CVE编号
CVE-2024-10704
利用情况
暂无
补丁情况
N/A
披露时间
2024-11-29
漏洞描述
The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
文章评论