CVE-2021-24903

4.8 mediumEPSS 0.6%

Medium (4.8) in codeasily grand flagallery. EPSS 0.6% chance of exploitation in the next 30 days.

The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when the unfiltered_html capability is disallowed.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-02-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

codeasily:grand_flagallery

References

https://wpscan.com/vulnerability/ad67e45e-254a-46ce-a243-bfc86839446e
https://wpscan.com/vulnerability/ad67e45e-254a-46ce-a243-bfc86839446e

Check your stack JSON