CVE-2018-7717

The htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery Extended SIGE extension 3.2.3 for Joomla! has XSS via a crafted image header, as demonstrated by the Caption-Abstract header object in a JPEG file. This is fixed in 3.3.1...

WordPress nextgen-gallery plugin information disclosure vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . nextgen-gallery plugin is used in one of the image management plugin . A security vulnerability exists in WordPress...

SQL Injection Vulnerability in gallery.php file of Qingdao Business-to-Signal website builder system

Qingdao business to letter network technology limited company is a long-term service in the information technology and electronic industry front high-tech position, specializing in e-commerce, website production and maintenance and database development company. There is a SQL injection...

Gallery WD, 1.3.9, SQL Injection

Gallery WD by Web Dorado, versions 1.3.9 and previous, SQL Injection resolution: update to 1.3.10 update notice: https://web-dorado.com/products/joomla-gallery.html...

WordPress NextGEN Gallery plugin <=2.2.46 - Gallery Paths Not Secured

Telefonica Cybersecurity Unit found an issue with insecure paths in WordPress NextGEN Gallery plugin versions =2.2.46. Solution Update the WordPress NextGEN Gallery plugin to the latest available version at least 2.2.50...

NextGEN Gallery <= 2.2.46 - Galley Paths Not Secured

The changelog states: "Secured: Gallery paths and the ability to manage tags Kudos: ElevenPaths Telefonica cibersecurity Unit"...

Design/Logic Flaw

In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured...

CVE-2018-7586

In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured...

CVE-2018-7586

In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured...

CVE-2018-7586

In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured...

CVE-2018-7586

CVE-2018-7586 affects the WordPress plugin NextGEN Gallery (versions before 2.2.50). The issue is described as gallery paths that are not secured, leading to exposure of gallery path information. According to connected sources, this vulnerability exists in the plugin prior to 2.2.50 and has a pot...

Kubik-Rubik Simple Image Gallery Extended (SIGE),3.2.3,XSS (Cross Site Scripting)

Kubik-Rubik Simple Image Gallery Extended SIGE, versions 3.2.3 and previous, XSS Cross Site Scripting resolution: update to 3.2.4 latest release is 3.3.0 update notice: https://joomla-extensions.kubik-rubik.de/sige-simple-image-gallery-extendedchangelog Note that the developer did not inform the ...

WordPress Photo Gallery by WD plugin <=1.3.66 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found in WordPress Photo Gallery by WD plugin versions =1.3.66. Solution Update the WordPress Photo Gallery by WD plugin to the latest available version at least 1.3.67...

Photo Gallery by WD <= 1.3.66 - Cross-Site Scripting (XSS)

User input gets first escaped with eschtml and then urldecoded. This leads to the possibility of reflected XSS with a double url encoded payload...

Photo Gallery by WD <= 1.3.66 - Cross-Site Scripting (XSS)

User input gets first escaped with eschtml and then urldecoded. This leads to the possibility of reflected XSS with a double url encoded payload. PoC...

CVE-2017-16356

CVE-2017-16356 affects Kubik-Rubik Simple Image Gallery Extended (SIGE) for Joomla. The vulnerability is a reflected XSS in print.php that allows JavaScript injection via crafted parameters (caption; also name/img in older versions). Impact is execution of script in the victim’s browser. Affected...

CVE-2017-16356

Reflected XSS in Kubik-Rubik SIGE aka Simple Image Gallery Extended before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/pluginsige/print.php link with a crafted img, name, or caption parameter...

WordPress Photo Gallery Plugin < 1.2.13 XSS Vulnerability

The WordPress plugin Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2015-2324

Cross-site scripting XSS vulnerability in the filemanager in the Photo Gallery plugin before 1.2.13 for WordPress allows remote authenticated users with edit permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the filemanager in the Photo Gallery plugin before 1.2.13 for WordPress allows remote authenticated users with edit permission to inject arbitrary web script or HTML via unspecified vectors...