11772 matches found
CVE-2024-22295 WordPress Robo Gallery Plugin <= 3.2.17 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery allows Stored XSS.This issue affects Photo Gallery, Images, Slider in Rbs Image Gallery: from n/a through 3.2.17...
CVE-2024-22295 WordPress Robo Gallery Plugin <= 3.2.17 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery allows Stored XSS.This issue affects Photo Gallery, Images, Slider in Rbs Image Gallery: from n/a through 3.2.17...
CVE-2024-22295
CVE-2024-22295 is a Stored XSS vulnerability in RoboGallery (RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery) affecting versions up to 3.2.17. Root cause is improper input neutralization during web page generation. The fix is version 3.2.18 and later. Patchstack describes a low-severi...
WordPress plugin Portfolio & Image Gallery for WordPress | PowerFolio 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. The WordPress plugin Portfolio & Image...
WordPress plugin Photo Gallery, Images, Slider in Rbs Image Gallery Cross Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...
PT-2024-19237 · WordPress · Pwr Plugins Portfolio & Image Gallery
Name of the Vulnerable Software and Affected Versions: PWR Plugins Portfolio & Image Gallery for WordPress | PowerFolio versions n/a through 3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for...
PT-2024-19316 · Unknown · Robosoft Photo Gallery
Name of the Vulnerable Software and Affected Versions: RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery versions 3.2.17 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stor...
WordPress ACF Photo Gallery Field Plugin <= 2.6 is vulnerable to Broken Access Control
Software ACF Photo Gallery Field Type Plugin Vulnerable versions = 2.6 Fixed in 2.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-23518 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 90b02382eae5 Credits Abdi Pranata Required...
Art Gallery Management System SQL Injection Vulnerability (CNVD-2024-05631)
Art Gallery Management System is an art gallery management system. Art Gallery Management System v1.1 suffers from a SQL injection vulnerability that originates from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...
Photo Gallery by 10Web - Mobile-Friendly Image Gallery < 1.8.20 - Directory Traversal to Arbitrary File Rename
Description The plugin is vulnerable to Directory Traversal attacks via the renameitem function. This makes it possible for authenticated attackers to rename arbitrary files on the server. Note: By default this can be exploited by administrators only. In the premium version of the plugin,...
englandgallery.com Cross Site Scripting vulnerability OBB-3842019
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Photo Gallery by 10Web Plugin <= 1.8.19 is vulnerable to Directory Traversal
Software Photo Gallery by 10Web Type Plugin Vulnerable versions = 1.8.19 Fixed in 1.8.20 OWASP Top 10 A4: Insecure Design Classification Directory Traversal CVE CVE-2024-0221 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID 29011d5256be Credits Bence Szalai Required privile...
WordPress Robo Gallery Plugin <= 3.2.17 is vulnerable to Cross Site Scripting (XSS)
Software Robo Gallery Type Plugin Vulnerable versions = 3.2.17 Fixed in 3.2.18 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-22295 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 29d8208eb109 Credits Bryan Satyamulya Required privilege...
zilbermangallery.com Cross Site Scripting vulnerability OBB-3835096
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-51978
In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerable to SQL Injection...
Sql injection
In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerable to SQL Injection...
Art Gallery Management System 安全漏洞
Art Gallery Management System is an art gallery management system. Art Gallery Management System v1.1 suffers from a SQL injection vulnerability that originates from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute...
CVE-2023-51978
In PHPGurukul Art Gallery Management System v1.1, the Update Artist Image feature using the imageid parameter is vulnerable to SQL Injection due to insufficient input validation. Affects the imageid-handling path/file/function in that feature, enabling potential unauthorized SQL execution that co...
PT-2024-14358 · Unknown · Phpgurukul Art Gallery Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: The issue affects the "Update Artist Image" functionality, where the imageid parameter is vulnerable to SQL Injection. This allows an attacker to inject malicious SQL code,...