Cross-site scripting (XSS) vulnerability in the setTimeout function in js/jquery.prettyPhoto.js in prettyPhoto 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted PATH_INTO to the default URI.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Photo Tile For Instagram Plugin | — | Update alpine-photo-tile-for-instagram plugin to version 1.2.7.5, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Contact Bank Plugin | — | Update contact-bank plugin to version 2.0.227, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Ehive Account Details Plugin | — | Update ehive-account-details plugin to version 2.1.3, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Ehive Object Details Plugin | — | Update ehive-object-details plugin to version 2.1.7, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Embedplus For Wordpress Plugin | — | Update embedplus-for-wordpress plugin to version 5.4, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Foxyshop Plugin | — | Update foxyshop plugin to version 4.6.1, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Gallery Bank Plugin | — | Update gallery-bank plugin to version 3.0.229, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Image Slider Widget Plugin | — | Update image-slider-widget plugin to version 1.1.7, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Images Lazyload And Slideshow Plugin | — | Update images-lazyload-and-slideshow plugin to version 3.3, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Izeechat Plugin | — | Update izeechat plugin to version 1.1, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Jcwp Youtube Channel Embed Plugin | — | Update jcwp-youtube-channel-embed plugin to version 2.0.0, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Myblogu Plugin | — | Update myblogu plugin to version 0.0.8, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Onclick Show Popup Plugin | — | Update onclick-show-popup plugin to version 6.6, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Random Image Gallery With Pretty Photo Zoom Plugin | — | Update random-image-gallery-with-pretty-photo-zoom plugin to version 7.5, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Reflex Gallery Plugin | — | Update reflex-gallery plugin to version 3.1.5, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Responsive Lightbox Plugin | — | Update responsive-lightbox plugin to version 1.4.12, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| S2member Secure File Browser Plugin | — | Update s2member-secure-file-browser plugin to version 0.4.17, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Tallykit Plugin | — | Update tallykit plugin to version 5.5, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Trexanh Property Plugin | — | Update trexanh-property plugin to version 0.2, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Webrotate 360 Product Viewer Plugin | — | Update webrotate-360-product-viewer plugin to version 2.5.2, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Wp Easy Gallery Plugin | — | Update wp-easy-gallery plugin to version 4.1.1, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Wp Portfolio Gallery Plugin | — | Update wp-portfolio-gallery plugin to version 1.2.0, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Wp Video Lightbox Plugin | — | Update wp-video-lightbox plugin to version 1.7.5, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
| Wppizza Plugin | — | Update wppizza plugin to version 2.11.8.18, or a newer patched version | May 15, 2025 | Aug 1, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub