Ciprian Popescu

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Ciprian Popescu records in CISA KEV

No Ciprian Popescu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Block For Font Awesome 2 records LOW Imagepress 2 records LOW Youtube Playlist Player 2 records LOW Modern Design Library 1 record LOW Portable-phpmyadmin 1 record MEDIUM

Records

2 records in Imagepress · all components

TI-2024-09073 CVE-2024-9776 · GHSA-w6g8-4xp6-6cr3

ImagePress - Image Gallery <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings

LOW 22

The ImagePress – Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00357 Published 2024-10-12 No fix listed CWE-79

TI-2024-09075 CVE-2024-9778 · GHSA-f3v3-rc63-5rrv

ImagePress – Image Gallery <= 1.2.2 - Cross-Site Request Forgery to Plugin Settings Update

LOW 20

The ImagePress – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00253 Published 2024-10-12 No fix listed CWE-352

Open these records in search →

Critical	1
High	3
Medium	5
Low	0
No CVSS	0