| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
| Exploit for CVE-2022-21907 | 15 Jan 202220:50 | ā | githubexploit | |
| CVE-2022-2190 | 5 Apr 202207:21 | ā | circl | |
| WordPress plugin Gallery č·Øē«čę¬ę¼ę“ | 31 Oct 202200:00 | ā | cnnvd | |
| CVE-2022-2190 Envira Gallery Lite < 1.8.4.7 - Reflected Cross-Site Scripting | 31 Oct 202200:00 | ā | cvelist | |
| EUVD-2022-34474 | 3 Oct 202520:07 | ā | euvd | |
| CVE-2022-2190 | 31 Oct 202216:15 | ā | nvd | |
| WordPress Envira Photo Gallery Lite Plugin < 1.8.4.7 XSS Vulnerability | 1 Nov 202200:00 | ā | openvas | |
| CVE-2022-2190 | 31 Oct 202216:15 | ā | osv | |
| WordPress Envira Gallery Lite plugin <= 1.8.4.6 - Reflected Cross-Site Scripting (XSS) vulnerability | 10 Oct 202200:00 | ā | patchstack | |
| Cross site scripting | 31 Oct 202216:15 | ā | prion |
[
{
"vendor": "Unknown",
"product": "Gallery Plugin for WordPress ā Envira Photo Gallery",
"versions": [
{
"version": "1.8.4.7",
"status": "affected",
"lessThan": "1.8.4.7",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| post_type | query param | wp-admin/edit.php?post_type=envira&page=envira-gallery-lite-addons&"><script>alert(1)</script> | Reflected XSS via unescaped REQUEST_URI output in an attribute | CWE-79 |
| page | query param | wp-admin/edit.php?post_type=envira&page=envira-gallery-lite-addons&"><script>alert(1)</script> | Reflected XSS via unescaped REQUEST_URI output in an attribute | CWE-79 |
Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation