Read the docs

Skyphe

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Skyphe records in CISA KEV

No Skyphe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in File-gallery · all components

Priority LOW 32

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting fields to /wp-admin/option…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01746 Published 2014-05-06 No fix listed CWE-94
Open these records in search →