Lucene search
+L

11766 matches found

Patchstack
Patchstack
added 2024/10/31 12:00 a.m.15 views

WordPress Easy Gallery Plugin <= 1.4 is vulnerable to SQL Injection

Software Easy Gallery Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51570 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 71bb9789b0d3 Credits LVT-tholv2k Required privilege Contributor Published 31...

8.5CVSS6.8AI score0.00395EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/10/29 2:15 p.m.37 views

CVE-2024-49632

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Senthil Vel CWD 3D Image Gallery cwd-3d-image-gallery allows Reflection Injection.This issue affects CWD 3D Image Gallery: from n/a through = 1.0...

7.1CVSS0.00288EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/29 2:15 p.m.15 views

CVE-2024-49632

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Coral Web Design CWD 3D Image Gallery allows Reflected XSS.This issue affects CWD 3D Image Gallery: from n/a through 1.0...

6.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/29 1:09 p.m.14 views

CVE-2024-49632 WordPress CWD 3D Image Gallery plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Coral Web Design CWD 3D Image Gallery allows Reflected XSS.This issue affects CWD 3D Image Gallery: from n/a through 1.0...

7.1CVSS7.2AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/29 1:09 p.m.65 views

CVE-2024-49632

CVE-2024-49632 affects the WordPress plugin CWD 3D Image Gallery (versions

7.1CVSS5.9AI score0.00288EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/10/29 12:00 a.m.8 views

WordPress plugin CWD 3D Image Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6AI score0.00288EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/24 1:15 p.m.28 views

CVE-2024-49696

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in robosoft Robo Gallery robo-gallery allows Stored XSS.This issue affects Robo Gallery: from n/a through = 3.2.21...

5.9CVSS0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/24 12:29 p.m.49 views

CVE-2024-49696 WordPress Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.21 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in robosoft Robo Gallery robo-gallery allows Stored XSS.This issue affects Robo Gallery: from n/a through = 3.2.21...

5.9CVSS0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/24 12:29 p.m.31 views

CVE-2024-49696 WordPress Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.21 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in robosoft Robo Gallery robo-gallery allows Stored XSS.This issue affects Robo Gallery: from n/a through = 3.2.21...

5.9CVSS5.9AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/24 12:29 p.m.75 views

CVE-2024-49696

CVE-2024-49696 is a Stored XSS in the Robo Gallery (WordPress plugin: Photo Gallery/ Robo Gallery) that affects versions 3.2.21 and earlier. The root cause is improper neutralization of input during web page generation. Impact is cross-site scripting potential; the Patchstack entry notes a low-se...

5.9CVSS5.9AI score0.0026EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/24 12:00 a.m.27 views

PT-2024-33649 · Unknown · Robo Gallery

Name of the Vulnerable Software and Affected Versions: Robo Gallery versions 3.2.21 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versio...

5.9CVSS5.3AI score0.0026EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/10/24 12:00 a.m.15 views

WordPress plugin Robo Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/23 7:30 a.m.37 views

CVE-2024-43924 WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7...

5.3CVSS0.00535EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/23 7:30 a.m.14 views

CVE-2024-43924 WordPress Responsive Lightbox & Gallery plugin <= 2.4.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7...

5.3CVSS6.9AI score0.00535EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/10/21 10:14 a.m.13 views

WordPress Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.21 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Robert DeVore Patchstack Alliance in WordPress Plugin Robo Gallery versions = 3.2.21...

5.9CVSS6.1AI score0.0026EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/21 7:40 a.m.6 views

WordPress CWD 3D Image Gallery plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin CWD 3D Image Gallery versions = 1.0...

7.1CVSS6.1AI score0.00288EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/10/21 12:00 a.m.23 views

WordPress CWD 3D Image Gallery Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software CWD 3D Image Gallery Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49632 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ff9d4857fb07 Credits João Pedro S Alcântara Kinorth...

7.1CVSS6.6AI score0.00288EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2024/10/21 12:00 a.m.17 views

WordPress Robo Gallery Plugin <= 3.2.21 is vulnerable to Cross Site Scripting (XSS)

Software Robo Gallery Type Plugin Vulnerable versions = 3.2.21 Fixed in 3.2.22 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49696 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 364c0d5e3b1f Credits Robert DeVore Required privilege Author...

5.9CVSS6.5AI score0.0026EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/10/20 11:15 a.m.25 views

CVE-2024-49325

Missing Authorization vulnerability in wpdiscover Photo Gallery Builder photo-gallery-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Photo Gallery Builder: from n/a through = 3.0...

8.8CVSS0.00411EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/20 11:15 a.m.6 views

CVE-2024-49325

Subscriber Broken Access Control in Photo Gallery Builder = 3.0 versions...

8.8CVSS5.8AI score0.00411EPSS
SaveExploits0References1
Rows per page
Query Builder