cve/2011/CVE-2011-4624.md

CVE-2011-4624

Description

Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/d4n-sec/d4n-sec.github.io