Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2021-24293 - In The Ecommerce Module Of The Nextgen Gallery Pro Plugin
In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_items via photocrati_ajax , after that the settings[shipping_address][name] is able to inject malicious javascript.
PLUGIN
In The Ecommerce Module Of The Nextgen Gallery Pro
CVE-2021-24293
Risk Score