Read the docs

Skyphe

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Skyphe records in CISA KEV

No Skyphe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
File-gallery 1 record LOW File Gallery 1 record LOW

Records

2 records

TI-2014-02052 CVE-2014-2558 · GHSA-pg2w-hcm2-5fww

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings…

Priority LOW 32

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting fields to /wp-admin/option…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01746 Published 2014-05-06 No fix listed CWE-94
TI-2023-26601 CVE-2023-48771 · GHSA-g2g8-v84r-762q

WordPress File Gallery Plugin <= 1.8.5.4 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno "Aesqe" Babic File Gallery allows Reflected XSS.This issue affects File Gallery: from n/a through 1.8.5.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-12-14 No fix listed CWE-79
Open these records in search →