Photospace Gallery Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Photospace Gallery Project records in CISA KEV

No Photospace Gallery Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Photospace Gallery 2 records LOW

Records

2 records

TI-2022-03660 CVE-2022-3991 · GHSA-86xj-57mh-7xc3

Photospace Gallery <= 2.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting

LOW 30

The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters saved via the update() function in versions up to, and including, 2.3.5 due to insufficient input sanit…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00695 Published 2022-11-29 No fix listed CWE-79

TI-2022-17839 CVE-2022-38135 · GHSA-cvjg-9hcx-pvx4

WordPress Photospace Gallery plugin <= 2.3.5 - Broken Access Control vulnerability

LOW 26

Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00667 Published 2022-09-12 No fix listed CWE-264

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0