Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Codeasily Clear all filters
TI-2022-00778 CVE-2022-0873 · GHSA-mcj2-mgf2-prv8

Gmedia Photo Gallery < 1.20.0 - Admin+ Stored Cross-Site Scripting

Priority LOW 24

The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, which could allow high privilege users such as admin to perfor…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00877 Published 2022-05-16 Fixed in 1.20.0 CWE-79
TI-2021-07183 CVE-2021-24903 · GHSA-p9r5-6jx9-h5wp

GRAND FlaGallery <= 6.1.2 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when the unfiltered_html…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00598 Published 2022-02-28 No fix listed CWE-79