CVE-2022-0186

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard

Date published : 2022-02-21

https://wpscan.com/vulnerability/3a9c44c0-866e-4fdf-b53d-666db2e11720