Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Skyphe Clear all filters
TI-2023-26601 CVE-2023-48771 · GHSA-g2g8-v84r-762q

WordPress File Gallery Plugin <= 1.8.5.4 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno "Aesqe" Babic File Gallery allows Reflected XSS.This issue affects File Gallery: from n/a through 1.8.5.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-12-14 No fix listed CWE-79
TI-2014-02052 CVE-2014-2558 · GHSA-pg2w-hcm2-5fww

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings…

Priority LOW 32

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting fields to /wp-admin/option…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01746 Published 2014-05-06 No fix listed CWE-94