CVE-2021-47951
Published
CVSS v3
6.4
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings. Attackers can enter JavaScript payloads in the plugin options that are stored in the database and executed when the functionality is triggered, enabling session hijacking or credential theft.
<p>Elevate your WordPress site with the Picture Gallery plugin, enabling users to easily upload and manage images through a frontend interface. This powerful plugin supports guest uploads with CAPTCHA, generates thumbnails, and integrates seamlessly into your WordPress Media Library. Whether you’re looking to display image portfolios or sell digital photos, this tool is equipped with AJAX updates for live listing, drag-and-drop uploads, and extensive customization options to meet all your photo gallery needs.</p>
<h4>Benefits</h4>
<ul>
<li>Frontend & Backend Uploads: Allows both visitors and administrators to upload images conveniently.</li>
<li>Advanced Security Features: Includes Google reCAPTCHA v3 to prevent spam and unauthorized uploads.</li>
<li>Dynamic AJAX Photo Lists: Updates the gallery live without page reloads, enhancing user experience.</li>
<li>Comprehensive Integration: Adds pictures and thumbnails to the WordPress Media Library for easy management.</li>
<li>Customizable Access Controls: Set permissions for uploads and gallery views, ensuring content security.</li>
<li>Monetization Opportunities: Integrates with plugins like “MicroPayments/FansPaysite – Creator Subscriptions, Digital Content Monetization” to enable photo sales directly from your gallery.</li>
<li>Multi-Device Compatibility: Supports uploads from mobile devices, including direct camera uploads on iOS and Android.</li>
<li>Enhanced Engagement: Features like the “Rate Star Review” allow visitors to rate and review images, fostering community interaction.</li>
<li>Bulk Upload Capabilities: Simplifies the process of adding large volumes of images, saving time and effort.</li>
</ul>
<h4>Key Features</h4>
<ul>
<li>adds picture post type to WordPress site with gallery taxonomy</li>
<li>allows upload and import of pictures from frontend and backend</li>
<li>guest picture upload with Google reCAPTCHA v3 integration, moderator notification</li>
<li>generates thumbnail, generates feature image</li>
<li>AJAX display and update of picture list</li>
<li>shortcodes for listing pictures, upload form, import form</li>
<li>mass picture upload</li>
<li>mass picture import (from server)</li>
<li>setup user types that can share pictures</li>
<li>pending picture / approval for user types that can’t publish directly</li>
<li>integrates <a href="https://wordpress.org/plugins/rate-star-review/" title="Rate Star Review - AJAX Reviews for Content, with Star Ratings" rel="ugc">Rate Star Review – AJAX Reviews for Content, with Star Ratings</a></li>
<li>filter pictures by category, tag, name</li>
<li>sort pictures by date, views, rating</li>
<li>include pictures and thumbs in Media Library (setting)</li>
</ul>
<h4>Guest Picture Upload</h4>
<ul>
<li>special shortcode for guest (visitor) picture upload</li>
<li>Google reCAPTCHA v3 integration</li>
<li>limit uploads per IP </li>
<li>moderator notification by email (custom)</li>
<li>custom message for upload success</li>
<li>persistent form fields in case of error</li>
</ul>
<h4>Access Control: Membership, Sales</h4>
<ul>
<li>define global picture access list (roles, user emails & ids)</li>
<li>role galleries: assign pictures as accessible by certain roles</li>
<li>exception galleries: free, registered, unpublished</li>
<li>show preview and custom message when inaccessible</li>
<li>integrates <a href="https://wordpress.org/plugins/paid-membership/" title="MicroPayments/FansPaysite - Creator Subscriptions, Digital Content Monetization" rel="ugc">MicroPayments/FansPaysite – Creator Subscriptions, Digital Content Monetization</a> plugin to allow selling items</li>
</ul>
<h4>HTML5 Picture Uploader</h4>
<ul>
<li>Drag & Drop</li>
<li>AJAX (no Submit, page reload required to upload more pictures)</li>
<li>multi picture support</li>
<li>status / progress bar for each upload</li>
<li>unpredictable secure upload file names</li>
<li>fallback to standard upload for older browsers</li>
<li>mobile camera upload (iOS6+, Android 3+)</li>
<li>backend multi upload menu</li>
</ul>
<h4>Recommended for use with these solutions</h4>
<ul>
<li><a href="https:/fanspaysite.com/" title="FansPaysite - Frontend Content Management and Monetization" rel="nofollow ugc">FansPaysite – Creator Subscriptions, MicroPayments, Digital Content</a> – manage content posts including pictures from frontend</li>
<li><a href="https://paidvideochat.com/" title="PaidVideoChat Turnkey Webcams Site Plugin" rel="nofollow ugc">Paid VideoChat</a> – integrate pictures in performer profiles</li>
<li><a href="https://wordpress.org/plugins/video-share-vod/" title="Video Share / Video On Demand Turnkey Site Plugin" rel="ugc">Video Share VOD</a> – add pictures in addition to videos</li>
<li><a href="https://broadcastlivevideo.com/" title="Broadcast Live Video Camera Site Plugin" rel="nofollow ugc">Broadcast Live Video</a> – add pictures in addition to live channels</li>
</ul>
<p>If you find this plugin idea useful or interesting, <a href="https://wordpress.org/support/plugin/picture-gallery/reviews/#new-post" rel="ugc">Leave a Review</a> to help us drive more resources into further development and improvements.</p>
<p>If you need custom development or support, <a href="https://consult.videowhisper.com/" title="Consult VideoWhisper for WP Plugin Development" rel="nofollow ugc">Consult VideoWhisper</a>: professional installation, configuration, troubleshooting, compatible hosting, custom development for new options and features.</p>
<h3>Support</h3>
<p>This is a free open source plugin provided as is. If you need further assistance, troubleshooting, custom development to integrate with your site, <a href="https://consult.videowhisper.com/" rel="nofollow ugc">Consult VideoWhisper</a>.</p>
<h3>Demos</h3>
<p>Pictures page on various themes:<br />
* <a href="https://demo.fanspaysite.com/pictures/" rel="nofollow ugc">Fans Paysite Demo</a><br />
* <a href="https://demo.videosharevod.com/pictures/" rel="nofollow ugc">Video Share VOD Demo</a><br />
* <a href="https://demo.paidvideochat.com/pictures/" rel="nofollow ugc">Paid Videochat Demo</a></p>