CVE-2024-31120

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Stored XSS.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.0.3.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Mar 31, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-311216.5Contributor Cross Site Scripting (XSS) in HeartThis <= 0.1.0 versions.CVE-2024-311225.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Prism IT Systems User Rights Access Ma CVE-2024-311237.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderFAQ allows Reflected X CVE-2024-311277.3An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may allow a local attacker to elevate their priv CVE-2024-31135.9The FormFlow: WhatsApp Social and Advanced Form Builder with Easy Lead Collection WordPress plugin before 2.12.2 does not sanitise and escap CVE-2024-311346.5In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registratio CVE-2024-311356.1In JetBrains TeamCity before 2024.03 open redirect was possible on the login page CVE-2024-311367.4In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter CVE-2024-311376.1In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration CVE-2024-311385.4In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings CVE-2024-311398.1In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector CVE-2024-31146.5An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to