Lucene search
+L

857 matches found

OSV
OSV
•added 2023/09/29 2:15 p.m.•14 views

CVE-2023-41658

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin = 1.0.13 versions...

6.1CVSS5.8AI score0.00353EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/04 12:15 p.m.•59 views

CVE-2023-3499

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.16 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for...

4.8CVSS5.8AI score0.0047EPSS
SaveExploits2References1
Exploit DB
Exploit DB
•added 2023/09/04 12:00 a.m.•396 views

CSZ CMS 1.3.0 - Stored Cross-Site Scripting (Plugin 'Gallery')

Exploit Title: CSZ CMS 1.3.0 - Stored Cross-Site Scripting Plugin 'Gallery' Date: 2023/08/18 CVE: CVE-2023-38911 Exploit Author: Daniel González Vendor Homepage: https://www.cszcms.com/ Software Link: https://github.com/cskaza/cszcms Version: 1.3.0 Tested on: CSZ CMS 1.3.0 Description: CSZ CMS...

5.4CVSS5.6AI score0.00495EPSS
SaveExploits4
NVD
NVD
•added 2023/09/01 11:15 a.m.•24 views

CVE-2023-25477

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Yotuwp Video Gallery plugin = 1.3.12 versions...

5.9CVSS5.4AI score0.00362EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/01 10:38 a.m.•104 views

CVE-2023-25477

CVE-2023-25477 is a stored XSS in the WordPress plugin Yotuwp Video Gallery (versions

5.9CVSS5AI score0.00362EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/09/01 12:00 a.m.•20 views

WordPress plugin Video Gallery cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

5.9CVSS6.1AI score0.00362EPSS
SaveExploits0References2
OSV
OSV
•added 2023/08/30 2:15 p.m.•17 views

CVE-2023-34183

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Valiano Unite Gallery Lite plugin = 1.7.61 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
•added 2023/08/30 12:15 p.m.•6 views

CVE-2023-32597

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Video Gallery plugin = 1.0.10 versions...

6.1CVSS6.3AI score
SaveExploits0References1
Prion
Prion
•added 2023/08/30 12:15 p.m.•29 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution Video Gallery plugin = 1.0.10 versions...

5.8CVSS6AI score0.00353EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/08/30 12:00 a.m.•19 views

PT-2023-23901 · I Thirteen Web Solution · I Thirteen Web Solution Video Gallery Plugin

Name of the Vulnerable Software and Affected Versions: I Thirteen Web Solution Video Gallery plugin versions 1.0.10 and earlier Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potential...

7.1CVSS6AI score0.00353EPSS
SaveExploits0References5
OSV
OSV
•added 2023/08/18 2:15 p.m.•15 views

CVE-2023-32107

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Photo Gallery Team Photo Gallery by Ays – Responsive Image Gallery plugin = 5.1.3 versions...

6.1CVSS5.8AI score0.00399EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2023/07/19 12:00 a.m.•9 views

WordPress WordPress Gallery Plugin – Limb Image Gallery Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Gallery Plugin – Limb Image Gallery Type Plugin Vulnerable versions = 1.5.5 Fixed in 1.5.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 4e432208fb7c Credits Rafie...

5.8AI score0.00272EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•9 views

WordPress RW Divi Unite Gallery Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software RW Divi Unite Gallery Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 58cef2f921eb Credits Rafie Muhammad Patchstack...

6.4AI score0.00272EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/17 10:50 a.m.•15 views

CVE-2023-23646 WordPress Album Gallery – WordPress Gallery Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in A WP Life Album Gallery – WordPress Gallery plugin = 1.4.9 versions...

4.3CVSS7.1AI score0.00271EPSS
SaveExploits0References1
CVE
CVE
•added 2023/07/17 10:50 a.m.•102 views

CVE-2023-23646

CSRF in WordPress plugin Album Gallery (A WP Life Album Gallery)

8.8CVSS6.5AI score0.00271EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/17 12:00 a.m.•7 views

CVE-2023-23646: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in A WP Life Album Gallery – WordPress Gallery plugin = 1.4.9 versions...

8.8CVSS7.8AI score0.00271EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/22 12:15 p.m.•14 views

CVE-2023-28784

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

6.1CVSS7.3AI score0.00382EPSS
SaveExploits0References1
NVD
NVD
•added 2023/06/22 12:15 p.m.•26 views

CVE-2023-28784

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

7.1CVSS6.2AI score0.00382EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/22 12:15 p.m.•23 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/06/22 11:21 a.m.•23 views

CVE-2023-28784 WordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Contest Gallery plugin = 21.1.2 versions...

7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References1
Rows per page
Query Builder