Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Robogallery Component: Robo Gallery Clear all filters
TI-2024-03636 CVE-2024-3896 · GHSA-q4gm-hf4c-83hx

Cross-site scripting in robosoft Robo Gallery – Photo & Image Slider

Priority LOW 28

The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the Gallery title field in all versions up to, and including, 3.2.19 due to insufficient in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-07-24 No fix listed CWE-79
TI-2024-14882 CVE-2024-22295 · GHSA-h53r-v36g-3338

WordPress Robo Gallery Plugin <= 3.2.17 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery allows Stored XSS.This issue affects Photo Gallery, Images…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00315 Published 2024-01-31 No fix listed CWE-79
TI-2023-03265 CVE-2023-3499 · GHSA-6593-m9wf-6mf9

Robo Gallery < 3.2.16 - Admin+ Stored XSS

Priority MEDIUM 55

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.16 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site S…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0047 Published 2023-09-04 Fixed in 3.2.16