CVE-2023-35098

Unauth. Reflected Cross-Site Scripting XSS vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in John Brien WordPress NextGen GalleryView plugin = 0.5.5 versions...

CVE-2023-35098

CVE-2023-35098 describes an unauthenticated reflected XSS in the WordPress NextGen GalleryView plugin (

PT-2023-25147 · John Brien · Nextgen Gallery Plugin

Name of the Vulnerable Software and Affected Versions: John Brien WordPress NextGen GalleryView plugin versions 0.5.5 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a...

WordPress plugin NextGen GalleryView 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Scripting (XSS)

Software NextGen GalleryView Type Plugin Vulnerable versions = 0.5.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-35098 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8e241746a1e2 Credits LEE SE HYOUNG...

CVE-2023-27744

An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution...

CVE-2023-27744

An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution...

South River Technologies TitanFTP NextGen 安全漏洞

South River Technologies TitanFTP NextGen South River Technologies Titan FTP NextGen is a natively supported cluster for high availability and failover SFTP/ FTP server. A security vulnerability exists in South River Technologies TitanFTP NextGen versions prior to v2.0.1.2102, which originated fr...

South River Technologies TitanFTP NextGen 安全漏洞

South River Technologies TitanFTP NextGen South River Technologies Titan FTP NextGen is a natively supported cluster for high availability and failover SFTP/ FTP server. A security vulnerability exists in South River Technologies TitanFTP NextGen that stems from allowing vertical elevation of...

PT-2023-21314 · South River Technologies · Titanftp Nextgen Server

Name of the Vulnerable Software and Affected Versions: South River Technologies TitanFTP NextGen server affected versions not specified Description: An issue in the South River Technologies TitanFTP NextGen server allows for a vertical privilege escalation, leading to remote code execution...

CVE-2023-27744

Technical details (affected software, root cause, specific versions, or fixes) are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.

CVE-2023-27744

An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution...

NextGen GalleryView <= 0.5.5 - Cross-Site Request Forgery

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software NextGen GalleryView Type Plugin Vulnerable versions = 0.5.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-34185 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID cfce11c606a0 Credits LEE SE HYOUNG...

WordPress NextGEN Gallery Plugin < 3.29 CSRF Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagely:nextgengallery"; if description...

CVE-2022-38468

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...

CVE-2022-38468

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...

CVE-2022-38468 WordPress NextGEN Gallery Plugin <= 3.28 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery plugin = 3.28 leading to thumbnail alteration...