CVE-2015-1394

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Photo Gallery plugin before 1.2.11 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the (1) sort_by, (2) sort_order, (3) items_view, (4) dir, (5) clipboard_task, (6) clipboard_files, (7) clipboard_src, or (8) clipboard_dest parameters in an addImages action to wp-admin/admin-ajax.php.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/archive/1/archive/1/534568/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
https://plugins.trac.wordpress.org/changeset/1073334/Third Party Advisory
https://plugins.trac.wordpress.org/changeset/1076678/photo-galleryThird Party Advisory
https://seclists.org/bugtraq/2015/Jan/140Exploit, Mailing List, Third Party Advisory
https://wordpress.org/plugins/photo-gallery/changelog/Third Party Advisory
http://www.securityfocus.com/archive/1/archive/1/534568/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
https://plugins.trac.wordpress.org/changeset/1073334/Third Party Advisory
https://plugins.trac.wordpress.org/changeset/1076678/photo-galleryThird Party Advisory
https://seclists.org/bugtraq/2015/Jan/140Exploit, Mailing List, Third Party Advisory
https://wordpress.org/plugins/photo-gallery/changelog/Third Party Advisory

Timeline

Published: Feb 8, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-13957.5Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to ar CVE-2015-13967.5A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attac CVE-2015-13976.5SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Community Edition (CE) 1.9.1 CVE-2015-13986.5Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote aut CVE-2015-13996.5PHP remote file inclusion vulnerability in the fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (C CVE-2015-14007.5SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL commands via the query para CVE-2015-14019.8Improper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth) extension 2.0.0 for TYPO3.CVE-2015-14024.3Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbit CVE-2015-14037.5SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL com CVE-2015-14044.3Cross-site scripting (XSS) vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to inje CVE-2015-14057.5SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary CVE-2015-14147.8Integer overflow in FreeBSD before 8.4 p24, 9.x before 9.3 p10. 10.0 before p18, and 10.1 before p6 allows remote attackers to cause a denia