CVE-2018-17946

The Tribulant Slideshow Gallery plugin before 1.6.6.1 for WordPress has XSS via the id, method, Gallerymessage, Galleryerror, or Galleryupdated parameter...

WordPress Tribulant Slideshow Gallery Plugin Cross-Site Scripting Vulnerability

Tribulant Slideshow Gallery is an application plugin available on the official WordPress Store that provides JavaScript-based sliding photo albums. A cross-site scripting vulnerability exists in the WordPress Tribulant Slideshow Gallery plugin where the Gallerymessage parameter submitted to the...

WordPress Tribulant Slideshow Galleries 1.6.3 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Tribulant Slideshow Galleries WordPress Plugin ------------------------------------------------------------------------ Spyros Gasteratos, July 2016...

CVE-2014-5460

The CVE-2014-5460 vulnerability affects the Tribulant Slideshow Gallery WordPress plugin prior to version 1.4.7. Affected component: the plugin’s file-upload mechanism (wp-content/uploads/slideshow-gallery/). Root cause: unrestricted file upload allows a remote authenticated user to upload a PHP ...