Now officially on WordPress.org

CVE Database / CVE-2024-10102

CVE · Low

CVE-2024-10102 — Robo Gallery – Photo & Image Slider [robo-gallery] < 3.2.22

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-10102 Robo Gallery – Photo & Image Slider [robo-gallery] < 3.2.22 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Low 2.7 < 3.2.22 3.2.22 2024-12-17 —

CVE-2024-10102

The Robo Gallery plugin for WordPress versions up to 3.2.21 contains a stored cross-site scripting vulnerability in the gallery settings functionality. Due to inadequate sanitization of user inputs and lack of proper escaping when displaying output, an unauthenticated attacker can inject malicious scripts that will execute in the browsers of any user who views an affected page. The vulnerability has been patched in version 3.2.22 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings