WordPress Masy Gallery plugin <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Masy Gallery versions = 1.7...

CVE-2025-24590

Missing Authorization vulnerability in picu picu picu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects picu: from n/a through = 2.4.0...

CVE-2025-24590

CVE-2025-24590 affects the WordPress plugin picu – Online Photo Proofing Gallery (versions up to 2.4.0). The issue is a Missing Authorization / broken access control vulnerability allowing exploitation of access control configuration. CVSS v3.1 base score 5.3 (Network, Low Confidentiality impact,...

CVE-2025-0721

A vulnerability classified as problematic has been found in needyamin imagegallery 1.0. This affects the function imagegallery of the file /view.php. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-0722

A vulnerability classified as critical was found in needyamin imagegallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. T...

CVE-2025-0722

A vulnerability classified as critical was found in needyamin imagegallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. T...

CVE-2025-0721

A vulnerability classified as problematic has been found in needyamin imagegallery 1.0. This affects the function imagegallery of the file /view.php. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-3036 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 Description: The issue is related to insufficient protection of service data in the Face Gallery component of watchOS, iOS, and iPadOS operating systems. ...

WordPress plugin picu – Online Photo Proofing Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2025-0722 needyamin image_gallery Cover Image gallery.php unrestricted upload

A vulnerability classified as critical was found in needyamin imagegallery 1.0. This vulnerability affects unknown code of the file /admin/gallery.php of the component Cover Image Handler. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. T...

image_gallery 安全漏洞

imagegallery is an image gallery management system by the individual developer Md. Yamin Hossain of Bangladesh. A security vulnerability exists in version 1.0 of imagegallery, which stems from the mishandling of the image parameter by the Cover Image Handler component in the /admin/gallery.php...

PT-2025-4021 · Needyamin · Image Gallery

Name of the Vulnerable Software and Affected Versions: needyamin image gallery version 1.0 Description: A problematic issue has been found in the image gallery function of the file /view.php. The manipulation of the username argument leads to cross site scripting. It is possible to initiate the...

PT-2025-4022 · Unknown · Needyamin Image Gallery

Name of the Vulnerable Software and Affected Versions: needyamin image gallery version 1.0 Description: A critical issue was found in the Cover Image Handler component of the file /admin/gallery.php, allowing for unrestricted upload through the manipulation of the image argument. This can be...

CVE-2024-13586

The Masy Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'justified-gallery' shortcode in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13586

The Masy Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'justified-gallery' shortcode in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13586 Masy Gallery <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Masy Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'justified-gallery' shortcode in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13586

CVE-2024-13586 (Masy Gallery, WordPress) is a stored cross-site scripting vulnerability in the Masy Gallery plugin for WordPress, exploitable via the justified-gallery shortcode. Affected versions are up to 1.7, with the issue caused by insufficient input sanitization and output escaping on user-...

CVE-2024-13586 Masy Gallery <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Masy Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'justified-gallery' shortcode in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress plugin Masy Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-2224 · WordPress · Masy Gallery

Name of the Vulnerable Software and Affected Versions: Masy Gallery plugin for WordPress versions up to, and including, 1.7 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'justified-gallery' shortcode due to insufficient input sanitization and output escaping on...