Lucene search
+L

190 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 6:05 a.m.10 views

CVE-2023-38513

Authorization Bypass Through User-Controlled Key vulnerability in Jordy Meow Photo Engine Media Organizer & Lightroom.This issue affects Photo Engine Media Organizer & Lightroom: from n/a through 6.2.5...

5.4CVSS6.6AI score0.00388EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:40 p.m.10 views

CVE-2021-37606

Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two messages, as demonstrated by an attack against a long-running web service that allows the attacker to infer collisions by measuring timin...

5.3CVSS6.8AI score0.00741EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:24 p.m.16 views

CVE-2021-24465

The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode available for users as low as Contributor before using it in an SQL statement, leading to an authenticated SQL Injection issue. The injection also allows the returned...

8.1CVSS7.8AI score0.01168EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/09 3:26 p.m.14 views

CVE-2025-47449

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jordy Meow Meow Gallery meow-gallery allows Stored XSS.This issue affects Meow Gallery: from n/a through = 5.2.7...

5.9CVSS7.2AI score0.00256EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/07 3:15 p.m.12 views

CVE-2025-47449

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jordy Meow Meow Gallery meow-gallery allows Stored XSS.This issue affects Meow Gallery: from n/a through = 5.2.7...

5.9CVSS0.00256EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/07 2:19 p.m.38 views

CVE-2025-47449 WordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jordy Meow Meow Gallery meow-gallery allows Stored XSS.This issue affects Meow Gallery: from n/a through = 5.2.7...

5.9CVSS0.00256EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 2:19 p.m.58 views

CVE-2025-47449

CVE-2025-47449 affects WordPress Meow Gallery (versions

5.9CVSS7.2AI score0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/07 2:19 p.m.10 views

CVE-2025-47449 WordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jordy Meow Meow Gallery meow-gallery allows Stored XSS.This issue affects Meow Gallery: from n/a through = 5.2.7...

5.9CVSS7.2AI score0.00256EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/05/07 12:26 p.m.12 views

WordPress Meow Gallery plugin <= 5.2.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by R4mbb in WordPress Plugin Meow Gallery versions = 5.2.7...

5.9CVSS7.1AI score0.00256EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/07 12:00 a.m.16 views

PT-2025-20085 · Unknown · Meow Gallery

Name of the Vulnerable Software and Affected Versions: Meow Gallery versions through 5.2.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject maliciou...

5.9CVSS6.2AI score0.00256EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/07 12:00 a.m.10 views

WordPress plugin Meow Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.2AI score0.00256EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/13 8:43 p.m.20 views

CVE-2024-29090

Server-Side Request Forgery SSRF vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4...

6.8CVSS6.9AI score0.00885EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:30 a.m.25 views

CVE-2024-34440

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.2.63...

9.1CVSS5.2AI score0.00824EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.23 views

CVE-2024-43332

Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0...

8.8CVSS0.00545EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/01 3:15 p.m.9 views

CVE-2024-43332

Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0...

8.8CVSS5.8AI score0.00545EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:17 p.m.62 views

CVE-2024-43332

CVE-2024-43332 is a Missing Authorization vulnerability in the WordPress Photo Engine (WPLR-Sync) plugin, affecting Photo Engine versions n/a through 6.4.0. The issue stems from incorrectly configured access control, enabling unauthorized access to protected resources. Public references note High...

8.8CVSS5.7AI score0.00545EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/01 12:00 a.m.8 views

PT-2024-30500 · Unknown · Jordy Meow Photo Engine

Name of the Vulnerable Software and Affected Versions: Jordy Meow Photo Engine versions n/a through 6.4.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...

8.8CVSS6.5AI score0.00545EPSS
SaveExploits0References3
NVD
NVD
added 2024/08/01 10:15 p.m.25 views

CVE-2024-39660

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a through 6.3.1...

5.9CVSS0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/01 9:43 p.m.12 views

CVE-2024-39660 WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a through 6.3.1...

5.9CVSS6.8AI score0.00259EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/01 9:43 p.m.25 views

CVE-2024-39660 WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Jordy Meow Photo Engine allows Stored XSS.This issue affects Photo Engine: from n/a through 6.3.1...

5.9CVSS0.00259EPSS
SaveExploits0References1
Rows per page
Query Builder