CyberRota Analysis
AI-GeneratedThe Document Gallery WordPress plugin prior to version 5.1.1 is vulnerable to a Reflected Cross-Site Scripting (XSS) attack due to inadequate sanitization and escaping of user input in an unauthenticated AJAX action. This vulnerability can be exploited by attackers to execute malicious scripts in the context of users accessing the affected site, potentially compromising user data and site integrity. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users.