Read the docs

picture-gallery

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

picture-gallery records in CISA KEV

No picture-gallery vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 56

WordPress Picture Gallery 1.4.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Edit Content URL field in the Access Control settings.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00187 Published 2026-05-10 No fix listed CWE-79
Open these records in search →