Exploit for Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting CVE-2021-24126

Name: Exploit for Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting CVE-2021-24126
Rating: 5 (282 reviews)

2020-12-19 | CVSS 1.3

## https://sploitus.com/exploit?id=WPEX-ID:F3952BD1-AC2F-4007-9E19-6C44A22465F3
As an editor+, add an image to a gallery and set its title (via the metadata) to <img src onerror=alert(/XSS/)>. Then view a page where the gallery is embed.

https://drive.google.com/open?id=1G15mMK4mLFV5VUL_vWxpbbBDworjciiM