Gallery Bank Plugin for WordPress < 2.0.20 XSS
Medium Nessus Plugin ID 105258
SynopsisThe remote web server is affected by multiple reflected cross-site scripting vulnerabilities.
DescriptionAccording to its self-reported version, the Gallery Bank Plugin for WordPress running on the remote web server is prior to 2.0.20.
It is, therefore, affected by multiple reflected cross-site scripting vulnerabilities.
A remote attacker can exploit these issues, via a specially crafted request, to execute arbitrary code in a user's browser, within the security context of the affected site.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
SolutionUpgrade the Gallery Bank Plugin for WordPress to version 2.0.20 or later.