CVE-2014-8491

The CVE-2014-8491 issue affects the Grand Flagallery WordPress plugin prior to version 4.25. Affected component: the plugin’s gallery-related scripts (flagallery-skins/banner_widget_default/gallery.php and flash-album-gallery/skins/banner_widget_default/gallery.php). Root cause: these endpoints c...

PT-2017-6240

Name of the Vulnerable Software and Affected Versions Grand Flagallery plugin versions prior to 4.25 Description The issue allows remote attackers to obtain the installation path. This can be achieved by sending a request to API endpoints such as "flagallery-skins/banner widget default/gallery.ph...

CVE-2014-8491: Exposure of Sensitive Information to an Unauthorized Actor

The Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the installation path via a request to 1 flagallery-skins/bannerwidgetdefault/gallery.php or 2 flash-album-gallery/skins/bannerwidgetdefault/gallery.php...

Gr& Flagallery <= 4.24 - Full Path Disclosure

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by a Full Path Disclosure security vulnerability...

WordPress EWWW Image Optimizer 2.0.1 Cross Site Scripting

Advisory ID: HTB23234 Product: EWWW Image Optimizer WordPress plugin Vendor: Shane Bishop Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: September 17, 2014 without technical details Vendor Notification: September 17, 2014 Vendor Patch: September 24, 2014...

CVE-2011-4624

Cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2011-4624

Cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2011-4624

The CVE-2011-4624 entry refers to a Cross-Site Scripting (XSS) flaw in the WordPress GRAND FlAGallery plugin (flash-album-gallery) specifically in facebook.php, exploitable before version 1.57 via the i parameter. Connected documents (e.g., NUCLEI template and OpenVAS entry) corroborate this XSS ...

CVE-2011-4624

Cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter...

PT-2014-2175

Name of the Vulnerable Software and Affected Versions GRAND FlAGallery plugin flash-album-gallery versions prior to 1.57 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. The vulnerability is exploite...

CVE-2011-4624: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter...

GRAND FlAGallery Skins - compact_music_player/gallery.php playlist Parameter SQL Injection

The flagallery-skins WordPress plugin was affected by a compactmusicplayer/gallery.php playlist Parameter SQL Injection security vulnerability...

GRAND Flash Album Gallery 0.55 - admin/news.php want2Read Parameter Traversal Arbitrary File Access

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by an admin/news.php want2Read Parameter Traversal Arbitrary File Access security vulnerability...

GRAND Flash Album Gallery 2.55 - "gid" SQL Injection

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by a "gid" SQL Injection security vulnerability...

GRAND Flash Album Gallery - Multiple Vulnerabilities

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

GRAND Flash Album Gallery 0.55 - lib/hitcounter.php pid Parameter SQL Injection

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by a lib/hitcounter.php pid Parameter SQL Injection security vulnerability...

GRAND Flash Album Gallery <= 1.56 - XSS

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by a XSS security vulnerability...

WordPress GRAND FlAGallery Plugin - SQL Injection

This plugin is prone to an SQL injection vulnerability in compactmusicplayer/gallery.php playlist parameter. Solution Upgrade the plugin...

CVE-2013-3261

Cross-site scripting XSS vulnerability in wp-admin/admin.php in the GRAND FlAGallery plugin before 2.72 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in a flag-manage-gallery action...