CyberRota Analysis
AI-GeneratedThe Meow Gallery WordPress plugin prior to version 5.5.2 is vulnerable due to improper escaping of attachment alt text, allowing users with Author roles or higher to inject JavaScript payloads. This can lead to cross-site scripting (XSS) attacks, potentially compromising the browsers of any visitors, including administrators, who view the affected galleries. WordPress site administrators and developers using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Meow Gallery WordPress plugin before 5.5.2 does not escape an attachment's alt text before outputting it into an attribute of the link it builds for linked galleries, allowing users with the Author role or above to store a JavaScript payload that executes in the browser of any visitor (including administrators) who views a post containing such a gallery.