CVE-2014-2333: Marcel Brinkkemper Lazyest-Gallery

Low severity, CVSS 2.6. EPSS: 2.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attackers to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these details are obtained from third party information.

Affected products

• Marcel Brinkkemper Lazyest-Gallery: up to and including 1.1.20; version 1.1 only; version 1.1.1 only; version 1.1.1.1 only; version 1.1.2.1 only; version 1.1.3 only; …

Published 2014-04-11. Last modified 2026-06-17.