CyberRota Analysis
AI-GeneratedThe CatFolders Document Gallery & PDF Library plugin for WordPress versions prior to 2.0.7 is vulnerable due to improper validation of block attributes, which allows users with Author roles and higher to inject malicious scripts into gallery outputs. This vulnerability can lead to cross-site scripting (XSS) attacks, potentially compromising the security of users viewing the affected posts. WordPress site administrators, particularly those using this plugin, should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not properly validate a block attribute before using it as an HTML tag name in its gallery output, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of anyone who views the affected post.