Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-17067

Malicious code in bioql PyPI...

6.4CVSS6.6AI score0.00164EPSS
Exploits0References3
NVD
NVD
added 2025/06/06 7:15 a.m.10 views

CVE-2025-5686

The Paged Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gallery' shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00164EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/06/06 6:42 a.m.8 views

CVE-2025-5686 Paged Gallery <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Paged Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gallery' shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00164EPSS
Exploits0References2
CVE
CVE
added 2025/06/06 6:42 a.m.49 views

CVE-2025-5686

CVE-2025-5686 refers to the Paged Gallery WordPress plugin. The Red Hat advisory confirms a Stored Cross-Site Scripting vulnerability in all versions up to 0.7, caused by insufficient input sanitization and output escaping in the plugin’s gallery shortcode. The issue enables authenticated attacke...

6.4CVSS5.7AI score0.00164EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/06 6:42 a.m.2 views

CVE-2025-5686 Paged Gallery <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Paged Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gallery' shortcode in all versions up to, and including, 0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00164EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.4 views

WordPress plugin Paged Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.4CVSS6.1AI score0.00164EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.4 views

PT-2025-24044 · WordPress · Paged Gallery

Name of the Vulnerable Software and Affected Versions: Paged Gallery plugin for WordPress versions up to and including 0.7 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the gallery shortcode. This allows authenticated attacke...

6.4CVSS6.3AI score0.00164EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/06/05 8:18 p.m.6 views

WordPress Paged Gallery plugin <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Paged Gallery versions = 0.7...

6.4CVSS5.5AI score0.00164EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder