13 matches found
CVE-2024-34424
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iePlexus Featured Content Gallery allows Stored XSS.This issue affects Featured Content Gallery: from n/a through 3.2.0...
EUVD-2024-34785
Malicious code in bioql PyPI...
CVE-2025-29093
File Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component...
CVE-2025-29093: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component...
Featured Content Gallery <= 3.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Description The Featured Content Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-34424: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iePlexus Featured Content Gallery allows Stored XSS.This issue affects Featured Content Gallery: from n/a through 3.2.0...
WordPress plugin Featured Content Gallery 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
CVE-2024-34424
The CVE-2024-34424 entry describes an Stored XSS in the iePlexus Featured Content Gallery for WordPress (plugin) 31ct; root cause is improper input neutralization during web page generation, affecting Featured Content Gallery versions from n/a through 3.2.0. Public details in connected Red Hat a...
CVE-2024-34424 WordPress Featured Content Gallery plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iePlexus Featured Content Gallery allows Stored XSS.This issue affects Featured Content Gallery: from n/a through 3.2.0...
PT-2024-25877 · Unknown · Ieplexus Featured Content Gallery
Name of the Vulnerable Software and Affected Versions: iePlexus Featured Content Gallery versions 3.2.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Stored XSS...
WordPress Featured Content Gallery plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Featured Content Gallery versions = 3.2.0...
WordPress Featured Content Gallery Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)
Software Featured Content Gallery Type Plugin Vulnerable versions = 3.2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34424 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID dd932076ad8b Credits Sharanabasappa Required privile...
WordPress WoowGallery – image gallery / content gallery / ecommerce gallery / social gallery / video gallery / album photo gallery plugin <= 1.1.8 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress WoowGallery – image gallery / content gallery / ecommerce gallery / social gallery / video gallery / album photo gallery plugin versions = 1.1.8. Solution Update the WordPress WoowGallery – image gallery / content gallery /...