Subhasis Laha

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Subhasis Laha records in CISA KEV

No Subhasis Laha vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-35071 CVE-2024-52400 · GHSA-3hm8-gfcv-xw4r

WordPress Gallerio plugin <= 1.01 - Arbitrary File Upload vulnerability

MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in Subhasis Laha Gallerio gallerio allows Upload a Web Shell to a Web Server.This issue affects Gallerio: from n/a through <= 1.01.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00492 Published 2024-11-16 No fix listed CWE-434

TI-2025-17396 CVE-2025-23629 · GHSA-p6w3-w72w-2g32

WordPress Gallerio plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Subhasis Laha Gallerio gallerio allows Reflected XSS.This issue affects Gallerio: from n/a through <= 1.0.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-01-23 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0