Read the docs

Rich-web

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Rich-web records in CISA KEV

No Rich-web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Coming Soon 1 record LOW Event Timeline 1 record LOW Image Gallery 1 record LOW Tab 1 record LOW

Records

1 record in Image Gallery · all components

TI-2022-01209 CVE-2022-1327 · GHSA-p5wh-qr78-vvvh

Image Gallery - Grid Gallery < 1.1.6 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Image Gallery WordPress plugin before 1.1.6 does not sanitize and escape some of its Image fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00588 Published 2022-06-27 Fixed in 1.1.6 CWE-79
Open these records in search →