TI-2014-02052 CVE-2014-2558 · GHSA-pg2w-hcm2-5fww
The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings…
Priority LOW 32
The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting fields to /wp-admin/option…