EUVD-2026-64260

AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in channelToGallery.json.php that allows attackers to modify site-wide Gallery configuration by performing unauthorized writes to plugin data. Attackers can craft a cross-site GET request carrying an administrator'...

CVE-2026-57944

AVideo (through commit 9c39d8c8) is affected by a cross-site request forgery (CSRF) vulnerability in channelToGallery.json.php . The endpoint lacks token validation, allowing an attacker to craft a cross-site GET request carrying an administrator's session cookie to perform unauthorized writes to...

JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability

----------------------------------------------------------------------------------- JV2 Folder Gallery 3.1.1 popupslideshow.php Multiple Vulnerability -----------------------------------------------------------------------------------...

Gallery Configuration Mode Authentication Bypass (deprecated)

Binary data 2500.prm...