Lucene search
+L

62 matches found

CVE
CVE
added 2023/05/20 10:8 p.m.67 views

CVE-2023-24414

CVE-2023-24414 : The Robo Gallery plugin (RoboSoft Photo Gallery, Images, Slider) for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in versions

8.8CVSS6.5AI score0.00273EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/04/07 2:15 p.m.7 views

CVE-2023-27620

Auth. contributor+ Stored Cross-site Scripting XSS vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.12 versions...

5.4CVSS6.7AI score0.00478EPSS
SaveExploits1References1
NVD
NVD
added 2023/03/01 2:15 p.m.32 views

CVE-2022-45804

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...

5.4CVSS5.6AI score0.00231EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/01 2:15 p.m.5 views

CVE-2022-45804

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...

5.4CVSS5.8AI score0.00231EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/01 2:15 p.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin = 3.2.9 leading to galleries hierarchy change, included plugin deactivate & activate...

5.8CVSS5.5AI score0.00231EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/03/01 1:19 p.m.58 views

CVE-2022-45804

The CVE-2022-45804 entry concerns the Robo Gallery (Rbs Image Gallery) WordPress plugin, version

5.4CVSS5.6AI score0.00231EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/03/01 12:0 a.m.5 views

WordPress plugin Photo Gallery, Images, Slider in Rbs Image Gallery 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS5.5AI score0.00231EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/27 9:15 a.m.7 views

CVE-2022-1327

The Image Gallery WordPress plugin before 1.1.6 does not sanitize and escape some of its Image fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

4.8CVSS5.8AI score0.00565EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/06/27 9:15 a.m.5 views

CVE-2022-1327

The Image Gallery WordPress plugin before 1.1.6 does not sanitize and escape some of its Image fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

4.8CVSS5.5AI score0.00565EPSS
SaveExploits2References2
Github Security Blog
Github Security Blog
added 2022/05/13 1:30 a.m.11 views

Jenkins Image Gallery Plugin allows Path Traversal

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields...

6.5CVSS7AI score0.03005EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/02/21 11:15 a.m.5 views

CVE-2022-0186

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard...

5.4CVSS5.9AI score0.00604EPSS
SaveExploits2References2
CNVD
CNVD
added 2017/09/15 12:0 a.m.5 views

Wordpress plugin image-gallery-with-slideshow cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress plugin image-gallery-with-slideshow cross-site scripting vulnerability. A remote attacker can exploit this...

5.4CVSS6.1AI score0.00981EPSS
SaveExploits1References1
OSV
OSV
added 2017/09/14 1:29 p.m.5 views

CVE-2017-1002015

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via selectMulGallery parameter...

9.8CVSS5.8AI score0.02907EPSS
SaveExploits1References2
OSV
OSV
added 2017/09/14 1:29 p.m.7 views

CVE-2017-1002012

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/adminsetting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement...

9.8CVSS5.8AI score0.03435EPSS
SaveExploits1References2
OSV
OSV
added 2017/02/09 3:59 p.m.13 views

CVE-2016-4987

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields...

6.5CVSS7AI score
SaveExploits0References1
CVE
CVE
added 2017/02/09 3:0 p.m.55 views

CVE-2016-4987

The CVE concerns the Jenkins Image Gallery Plugin where versions prior to 1.4 are vulnerable to a directory traversal flaw. An attacker could remotely list arbitrary directories and read arbitrary files via unspecified form fields in the plugin. This is documented across multiple sources (GHSA, O...

6.5CVSS6.4AI score0.03005EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2016/12/07 12:0 a.m.2 views

WordPress Image Gallery Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blog platform , the platform supports PHP and MySQL server set up a personal blog site . Image Gallery is one of the image processing plug-ins . WordPress Image Gallery version 1.9.65 there is an HTML...

7.1AI score
SaveExploits0References1
CNVD
CNVD
added 2016/06/21 12:0 a.m.3 views

CloudBees Jenkins CI Image Gallery Plugin Path Traversal Vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is a set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Jenkins CI Image Gallery is one of the workspace for reading and...

6.5CVSS6.7AI score0.03005EPSS
SaveExploits0References1
NVD
NVD
added 2014/09/22 2:55 p.m.23 views

CVE-2014-7153

SQL injection vulnerability in the editgallery function in admin/galleryfunc.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php...

6.5CVSS8AI score0.02293EPSS
SaveExploits2References1
CVE
CVE
added 2014/09/22 2:0 p.m.43 views

CVE-2014-7153

The CVE-2014-7153 affects the WordPress Huge-IT Image Gallery plugin (version 1.0.1) via a SQL injection in admin/gallery_func.php: editgallery, exploitable by remote authenticated users through the removeslide parameter to wp-admin/admin.php. Root cause is unsafe SQL construction in the removesl...

6.5CVSS8.3AI score0.02293EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder