Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

11841 matches found

OSV
OSV•added 2019/04/15 9:29 p.m.•10 views

CVE-2018-18017

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Galleryid or Gallerytitle parameter...

6.1CVSS5.8AI score0.01021EPSS
SaveExploits1References2
Prion
Prion•added 2019/04/15 9:29 p.m.•23 views

Cross site scripting

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Galleryid or Gallerytitle parameter...

4.3CVSS6AI score0.01021EPSS
SaveExploits1References2Affected Software1
OSV
OSV•added 2019/04/15 9:29 p.m.•12 views

CVE-2018-18018

SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Galleryid or Gallerytitle parameter...

9.8CVSS5.8AI score0.02193EPSS
SaveExploits1References2
OSV
OSV•added 2019/04/15 9:29 p.m.•13 views

CVE-2018-18019

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slidetitle, Slidemediafile, or Slideimageurl parameter...

6.1CVSS5.8AI score0.01021EPSS
SaveExploits1References2
NVD
NVD•added 2019/04/15 9:29 p.m.•24 views

CVE-2018-18017

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Galleryid or Gallerytitle parameter...

6.1CVSS6.1AI score0.01021EPSS
SaveExploits1References2
CVE
CVE•added 2019/04/15 8:29 p.m.•61 views

CVE-2018-18019

Summary (CVE-2018-18019) : The Tribulant Slideshow Gallery WordPress plugin is affected up to version 1.6.8. The vulnerability is a cross-site scripting (XSS) flaw caused by parameter handling in the admin flow: Slide[title], Slide[media_file], or Slide[image_url] passed through wp-admin/admin.ph...

6.1CVSS6.6AI score0.01021EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist•added 2019/04/15 8:29 p.m.•29 views

CVE-2018-18019

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slidetitle, Slidemediafile, or Slideimageurl parameter...

6.7AI score0.01021EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2019/04/15 8:27 p.m.•32 views

CVE-2018-18018

SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Galleryid or Gallerytitle parameter...

10AI score0.02193EPSS
SaveExploits1References2
CVE
CVE•added 2019/04/15 8:27 p.m.•61 views

CVE-2018-18018

The CVE concerns the Tribulant Slideshow Gallery WordPress plugin (v1.6.8) where SQL injection is possible via wp-admin/admin.php?page=slideshow-galleries&method=save with Gallery[id] or Gallery[title]. The issue comes from unsafely handled input in the plugin’s save endpoint, enabling confidenti...

9.8CVSS9.9AI score0.02193EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist•added 2019/04/15 8:24 p.m.•32 views

CVE-2018-18017

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Galleryid or Gallerytitle parameter...

6.7AI score0.01021EPSS
SaveExploits1References2
CVE
CVE•added 2019/04/15 8:24 p.m.•67 views

CVE-2018-18017

CVE-2018-18017 applies to the Tribulant Slideshow Gallery plugin for WordPress (version 1.6.8). The vulnerability is a reflected XSS in the admin interface, exploitable via the wp-admin/admin.php?page=slideshow-galleries&method=save with Gallery[id] or Gallery[title] parameters. Public sources (N...

6.1CVSS6.6AI score0.01021EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD•added 2019/04/15 12:00 a.m.•11 views

WordPress Tribulant Slideshow Gallery plugin cross-site scripting vulnerability (CNVD-2019-30133)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Tribulant Slideshow Gallery plugin is an image autoplay plugin used in it. A cross-site scripting vulnerability exists in...

6.1CVSS6.3AI score0.01021EPSS
SaveExploits1References1
CNVD
CNVD•added 2019/04/11 12:00 a.m.•15 views

WordPress wpape APE GALLERY plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wpape APE GALLERY plugin is an image management plugin used in it. A cross-site scripting vulnerability exists in the...

6.1CVSS6.3AI score0.00951EPSS
SaveExploits1References1
NVD
NVD•added 2019/04/09 6:29 p.m.•24 views

CVE-2019-6117

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

6.1CVSS6.1AI score0.00951EPSS
SaveExploits1References1
Prion
Prion•added 2019/04/09 6:29 p.m.•24 views

Cross site scripting

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

4.3CVSS6AI score0.00951EPSS
SaveExploits1References1Affected Software1
OSV
OSV•added 2019/04/09 6:29 p.m.•7 views

CVE-2019-6117

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

6.1CVSS6.3AI score0.00951EPSS
SaveExploits1References1
Cvelist
Cvelist•added 2019/04/09 5:51 p.m.•23 views

CVE-2019-6117

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...

6.1AI score0.00951EPSS
SaveExploits1References1
CVE
CVE•added 2019/04/09 5:51 p.m.•47 views

CVE-2019-6117

The CVE-2019-6117 entry documents a stored XSS in WordPress wpape APE GALLERY plugin version 1.6.14, arising from getCategories in classGallery.php. The root cause is a lack of proper validation of client-side data by the web application, enabling an attacker to inject scripts that persist in the...

6.1CVSS5.9AI score0.00951EPSS
SaveExploits1References1Affected Software1
zdt
zdt•added 2019/03/27 12:00 a.m.•46 views

XooGallery - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: XooGallery - Multiple SQL Injections Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/html5-php-photo-gallery.html Demo Site: http://xooscripts.com/demos/xoogallery/ Version: Lastest Tested on:...

0.4AI score
SaveExploits0
exploitpack
exploitpack•added 2019/03/26 12:00 a.m.•14 views

XooGallery - Multiple SQL Injection

XooGallery - Multiple SQL Injection Exploit Title: XooGallery - Multiple SQL Injections Date: 26.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://xooscripts.com/product/html5-php-photo-gallery.html Demo Site: http://xooscripts.com/demos/xoogallery/ Version: Lastest Tested on: Ka...

0.9AI score
SaveExploits0
Rows per page
Query Builder