GHSA-F8GG-FH4P-4795 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-4795

creationtimestamp| type| source ---|---|--- 2026-05-26 09:18:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmqnxc33uk2p...

CVE-2025-20775

CVE-2025-20775 affects MediaTek chipsets’ display component. The issue is a memory corruption due to a use-after-free in display, allowing local escalation of privilege to System level without user interaction. Affected versions are prior to Patch ID ALPS10182914; the patch/mitigation is ALPS1018...

CVE-2022-4795

The Galleries by Angie Makes WordPress plugin through 1.67 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting atta...

CVE-2025-4795

creationtimestamp| type| source ---|---|--- 2025-05-16 19:34:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16739...

CVE-2025-4795 gongfuxiang schoolcms index.php SaveInfo sql injection

A vulnerability classified as critical has been found in gongfuxiang schoolcms 2.3.1. This affects the function SaveInfo of the file /index.php?m=Admin&c=article&a=SaveInfo. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-4795

CVE-2025-4795 affects gongfuxiang schoolcms 2.3.1. The vulnerability is in the SaveInfo function (/index.php?m=Admin&c=article&a=SaveInfo) where manipulating the ID parameter enables SQL injection. It can be exploited remotely, and public exploit details are present. Several connected sources cor...

CVE-2022-4795

creationtimestamp| type| source ---|---|--- 2025-03-10 19:39:13+00:00| seen| Telegram/fLJ6lGx5SEGUsUQppi4LqCab5KRVCC88F1bP657NGgXm69U...

CGA-JVCW-VG7Q-4795

Bulletin has no description...

CVE-2024-4795

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit ha...

Ubuntu 16.04 ESM : Apache Groovy vulnerability (USN-4795-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-4795-1 advisory. It was discovered that Apache Groovy incorrectly handled serialization mechanisms. An attacker could possibly use this issue to execute arbitrary code. Tenable ha...

CVE-2023-4795

creationtimestamp| type| source ---|---|--- 2023-10-17 00:32:28+00:00| seen| https://t.me/cibsecurity/72360...

CVE-2023-4795 Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS

The Testimonial Slider Shortcode WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used agains...

CVE-2018-4795

Rejected reason: This candidate is unused by its CNA...

WordPress Galleries by Angie Makes Plugin <= 1.67 is vulnerable to Cross Site Scripting (XSS)

Software Galleries by Angie Makes Type Plugin Vulnerable versions = 1.67 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4795 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID c4b62d67a4b8 Credits Lana Codes...

CVE-2022-4795

CVE-2022-4795 concerns the WordPress plugin Galleries by Angie Makes (versions

SUSE CVE-2008-4795

The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackers to inject arbitrary web script or HTML via cross-site scripting XSS attacks...

Ubuntu: Security Advisory (USN-4795-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 9 : rsyslog (ALSA-2022:4795)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:4795 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. T...

RHEL 9 : rsyslog (RHSA-2022:4795)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:4795 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on...