Threats tagged 'ghsa-jjc4-f2rc-wxx3'

The Gallery for Social Photo WordPress plugin up to version 1.0.0.41 contains a vulnerability where it does not validate user-supplied URLs before using them in server-side requests. This flaw allows unauthenticated attackers to make the server perform requests to arbitrary internal hosts and read the responses.