CVE-2026-15820

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-15820 Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Module 'attributes' Setting

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-15820 Builderall for WordPress <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Photo Module 'attributes' Setting

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-15820

Builderall for WordPress (versions up to and including 3.0.2 ) is vulnerable to an Authenticated Stored Cross-Site Scripting flaw in the Photo Module 'attributes' Setting , caused by insufficient input sanitization and output escaping . An attacker with Contributor-level access or above can injec...

EUVD-2026-75239

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2026-89264

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-15820: Improper Neutralization of Input During Web Page Generation

The Builderall for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Photo Module 'attributes' Setting in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-57839

Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-57839

Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-57839

Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-57839

Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2025-35040

Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality...

CVE-2025-57839

Technical details (affected products/versions, root cause specifics, impact scope, remediation) are not publicly provided in the supplied documents. Monitor for updates from connected sources for concrete vulnerability data.

HONOR MagicOS 安全漏洞

HONOR MagicOS is a mobile operating system from China's Honor HONOR. A security vulnerability exists in HONOR MagicOS, which stems from an information leak in the photo module that may affect service confidentiality...

CVE-2025-57839: Exposure of Sensitive Information to an Unauthorized Actor

Photo module is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality...

RunCMS Module Photo 3.02 - cid SQL Injection

RunCMS Module Photo 3.02 - cid SQL Injection RunCMS Module Photo 3.02 SQL injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAÄ°L : [email protected] DORK 1 : allinurl: "modules/photo/viewcat.php?id" DORK 2 :...