Piwigo Cross-Site Scripting Vulnerability (CNVD-2020-03256)

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A cross-site scripting vulnerability exists in Piwigo. The vulnerability stems from the lack of proper validation of client-side data ...

WordPress spreadshirt-rss-3d-cube-flash-gallery cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. spreadshirt-rss-3d-cube-flash-gallery is an image gallery plugin used in it. A cross-site scripting vulnerability exists in WordPress...

CVE-2014-4553

Cross-site Scripting XSS in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress allows remote attackers to execute arbitrary web script or HTML via unspecified parameters...

Cross site scripting

Cross-site Scripting XSS in the spreadshirt-rss-3d-cube-flash-gallery plugin 2014 for WordPress allows remote attackers to execute arbitrary web script or HTML via unspecified parameters...

CVE-2014-4553

CVE-2014-4553 concerns Cross-site Scripting (XSS) in the spreadshirt-rss-3d-cube-flash-gallery plugin for WordPress (2014). The vulnerability is described as allowing remote attackers to execute arbitrary web script or HTML via unspecified parameters. The connected documents confirm the affected ...

WordPress Photo Gallery – Image Gallery by Ape plugin <= 2.0.6 - Authenticated Arbitrary plugin deactivation

Authenticated Arbitrary plugin deactivation found by Jerome Bruandet in WordPress Photo Gallery – Image Gallery by Ape plugin versions = 2.0.6. Solution Update the WordPress Photo Gallery – Image Gallery by Ape plugin to the latest available version at least 2.0.7...

Photo Gallery – Image Gallery by Ape <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation

The Photo Gallery – Image Gallery by Ape WordPress plugin was affected by an Authenticated Arbitrary Plugin Deactivation security vulnerability...

WordPress NextGEN Gallery Path Traversal Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.NextGEN Gallery is an image gallery plugin used in it. A path traversal vulnerability exists in path selection in WordPress NextGEN...

WordPress NextGEN Gallery Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.NextGEN Gallery is an image gallery plugin used in it. A cross-site scripting vulnerability exists in WordPress NextGEN Gallery. The...

CVE-2015-9538

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection...

CVE-2015-9537

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnailwidth, thumbnailheight, thumbwidth, thumbheight, wmXpos, and wmYpos, and template...

Cross site scripting

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnailwidth, thumbnailheight, thumbwidth, thumbheight, wmXpos, and wmYpos, and template...

Directory traversal

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection...

CVE-2015-9537

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnailwidth, thumbnailheight, thumbwidth, thumbheight, wmXpos, and wmYpos, and template...

CVE-2015-9537

The CVE-2015-9537 entry concerns the WordPress NextGEN Gallery plugin prior to version 2.1.10, which contains multiple XSS vulnerabilities. The affected component is the NextGEN Gallery WordPress plugin; the root cause is insufficient sanitization/validation of user-supplied input in several fiel...

CVE-2015-9538

The CVE-2015-9538 entry applies to the WordPress NextGEN Gallery plugin prior to version 2.1.15. The flaw is a directory traversal vulnerability in path selection ("../"), caused by insufficient filtering of path components, which could allow access to locations outside a restricted directory. Af...

CVE-2015-9538

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection...

CVE-2013-6239

Cross-site scripting XSS vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter in a detail action...

Cross site scripting

Cross-site scripting XSS vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter in a detail action...

CVE-2013-6239

Cross-site scripting XSS vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter in a detail action...