Read the docs

Xooscripts

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Xooscripts records in CISA KEV

No Xooscripts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xoogallery 4 records HIGH

Records

5 records

TI-2019-15577 CVE-2019-25524 · GHSA-r6hg-wqjc-4874

XooGallery Lastest Latest SQL Injection via results.php

Priority HIGH 77

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00447 Published 2026-03-12 No fix listed CWE-89
TI-2019-15576 CVE-2019-25523 · GHSA-hqxq-f57j-hxm4

XooGallery Lastest Latest SQL Injection via cat.php

Priority HIGH 77

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00447 Published 2026-03-12 No fix listed CWE-89
TI-2019-15575 CVE-2019-25522 · GHSA-965p-mpmm-22r4

XooGallery Lastest Latest Multiple SQL Injections via photo.php

Priority HIGH 77

XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through the photo_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00415 Published 2026-03-12 No fix listed CWE-89
TI-2019-15562 CVE-2019-25509 · GHSA-qrrg-66x7-hr5c

XooDigital Lastest Latest SQL Injection via results.php

Priority HIGH 77

XooDigital Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00355 Published 2026-03-12 No fix listed CWE-89
TI-2019-15574 CVE-2019-25521 · GHSA-vjhg-99hj-59fh

XooGallery Lastest Latest SQL Injection via gal.php gal_id

Priority MEDIUM 44

XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the gal_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00333 Published 2026-03-12 No fix listed CWE-89
Open these records in search →