WordPress Pixel Gallery Addons for Elementor plugin <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Pixel Gallery Addons for Elementor versions = 1.6.7...

CVE-2025-49486

A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items...

CVE-2025-7767

A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/edit-art-medium-detail.php. The manipulation of the argument artmed leads to cross site scripting. The atta...

CVE-2025-31422

Deserialization of Untrusted Data vulnerability in designthemes Visual Art | Gallery WordPress Theme visual-arts allows Object Injection.This issue affects Visual Art | Gallery WordPress Theme: from n/a through = 2.4...

CVE-2025-48291

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through = 26.0.6...

CVE-2025-49486

A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items...

CVE-2025-49486 Extension - balbooa.com - Stored XSS in Balbooa Gallery component version 1.0.0 - 2.4.0 for Joomla

A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items...

CVE-2025-49486 Extension - balbooa.com - Stored XSS in Balbooa Gallery component version 1.0.0 - 2.4.0 for Joomla

A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items...

CVE-2025-49486

The CVE-2025-49486 entry covers a stored XSS vulnerability in Balbooa Gallery for Joomla, affecting versions 1.0.0 through 2.4.0. The flaw allows privileged users to inject scripts into gallery items, with CVSS 4.0 vector yielding a base score of 8.6 (HIGH) and impact on confidentiality, integrit...

CVE-2025-6726 Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classicgalleryslideroptions function in all versions up to, and including, 1.1.1. This makes it possible for authenticated attackers, with...

CVE-2025-6726 Block Editor Gallery Slider <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update

The Block Editor Gallery Slider plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the classicgalleryslideroptions function in all versions up to, and including, 1.1.1. This makes it possible for authenticated attackers, with...

CVE-2025-6726

CVE-2025-6726 relates to the Block Editor Gallery Slider WordPress plugin. The Wordfence/NVD entry states a missing capability check in classic_gallery_slider_options() affects all versions up to and including 1.1.1, enabling authenticated users with Subscriber-level access or higher to modify li...

CVE-2025-7767

A vulnerability, which was classified as problematic, has been found in PHPGurukul Art Gallery Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/edit-art-medium-detail.php. The manipulation of the argument artmed leads to cross site scripting. The atta...

CVE-2025-7767

CVE-2025-7767 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability lies in the /admin/edit-art-medium-detail.php file where the artmed parameter can be manipulated to trigger cross-site scripting (XSS). The issue is exploitable remotely, and multiple connected sources indicate ...

PT-2025-30023 · WordPress · Balbooa Gallery

Name of the Vulnerable Software and Affected Versions: Balbooa Gallery plugin versions 1.0.0 through 2.4.0 Description: A stored cross-site scripting XSS issue exists in the Balbooa Gallery plugin for Joomla. Privileged users can store malicious scripts within gallery items. Recommendations: Upda...

PT-2025-29984 · Phpgurukul · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A problematic issue has been identified in PHPGurukul Art Gallery Management System. The vulnerability is related to an unknown functionality within the...

PT-2025-30003 · WordPress · Block Editor Gallery Slider

Name of the Vulnerable Software and Affected Versions: Block Editor Gallery Slider plugin for WordPress versions up to and including 1.1.1 Description: The Block Editor Gallery Slider plugin for WordPress is susceptible to unauthorized data modification. A missing capability check within the...

WordPress plugin Vertical scroll image slideshow gallery cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin Block Editor Gallery Slider security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Balbooa Gallery 跨站脚本漏洞

Balbooa Gallery is a Joomla extension from Balbooa Inc. A cross-site scripting vulnerability exists in Balbooa Gallery versions 1.0.0-2.4.0, which stems from a stored cross-site scripting attack...