Sploitus

Exploit for Grid Gallery < 1.2.5 - Authenticated Stored Cross Site Scripting (XSS)

CVE-2021-24529

wpexploit · 2021-07-21

Exploit Code

MARKDOWN7 lines
## https://sploitus.com/exploit?id=WPEX-ID:8953D931-19F9-4B73-991C-9C48DB1AF8B5
Step 1: Install Grid Gallery - Photo Image Grid Gallery plugin in word press and activate the plugin.
Step 2: Click on add grid gallery there is a title field.
Step 3: select a photo and inject malicious JavaScript in title field and save to draft and preview it.
Step 4: XSS payload will render.

https://drive.google.com/file/d/1A-WI_Ma7p-4FZ8KqgHAHnkiaCNZU5OFn/view?usp=sharing