Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2025/10/23 9:13 a.m.3 views

CVE-2025-11866

The Photographers galleries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcode attributes w, h, rawcss, look, etc. in all versions up to, and including, 1.1.8. This is due to the plugin not properly sanitizing user input or escaping output when inserting thes...

6.4CVSS5.1AI score0.00032EPSS
Exploits0References1
NVD
NVD
added 2025/10/22 9:15 a.m.4 views

CVE-2025-11866

The Photographers galleries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcode attributes w, h, rawcss, look, etc. in all versions up to, and including, 1.1.8. This is due to the plugin not properly sanitizing user input or escaping output when inserting thes...

6.4CVSS0.00032EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/22 8:27 a.m.4 views

CVE-2025-11866 Photographers galleries <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Photographers galleries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcode attributes w, h, rawcss, look, etc. in all versions up to, and including, 1.1.8. This is due to the plugin not properly sanitizing user input or escaping output when inserting thes...

6.4CVSS4.7AI score0.00032EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/22 8:27 a.m.6 views

CVE-2025-11866 Photographers galleries <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Photographers galleries plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcode attributes w, h, rawcss, look, etc. in all versions up to, and including, 1.1.8. This is due to the plugin not properly sanitizing user input or escaping output when inserting thes...

6.4CVSS0.00032EPSS
Exploits0References2
CVE
CVE
added 2025/10/22 8:27 a.m.10 views

CVE-2025-11866

The CVE-2025-11866 entry concerns the WordPress Photographers galleries plugin (versions

6.4CVSS4.7AI score0.00032EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.1 views

WordPress plugin Photographers galleries 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.8AI score0.00032EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/10/21 11:57 p.m.3 views

WordPress Photographers galleries plugin <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Photographers galleries versions = 1.1.8...

6.4CVSS5.7AI score0.00032EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.3 views

WordPress Plugin Sunshine Photo Cart: Free Client Galleries for Photographers Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS6.3AI score0.00454EPSS
Exploits0References4
OSV
OSV
added 2023/12/20 2:15 p.m.1 views

CVE-2023-41796

Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers: from n/a before 3.0.0...

6.5CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2023/12/20 1:42 p.m.46 views

CVE-2023-41796

The Sunshine Photo Cart plugin for WordPress (Sunshine Photo Cart: Free Client Galleries for Photographers) is affected by CVE-2023-41796. Affected versions are before 3.0.0 and the root cause is Insecure Direct Object References (IDOR) caused by authorization bypass via a user-controlled key, en...

6.5CVSS7.1AI score0.00047EPSS
Exploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2023/03/09 9:56 a.m.7 views

northbayphotographers.com Cross Site Scripting vulnerability OBB-3215026

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploits0
Openbugbounty
Openbugbounty
added 2023/01/14 11:38 p.m.14 views

gcphotographers.com Cross Site Scripting vulnerability OBB-3151490

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
OpenVAS
OpenVAS
added 2019/05/07 12:0 a.m.56 views

Fedora Update for fondo FEDORA-2019-27e7b92407

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Openbugbounty
Openbugbounty
added 2017/10/09 7:4 p.m.13 views

madforitproductions.com XSS vulnerability

Vulnerable URL: http://www.madforitproductions.com/artist.php?cat=photographers=%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

6.3AI score
Exploits0
The Hacker News
The Hacker News
added 2015/06/26 9:0 p.m.10 views

World’s First 200GB microSD Card Arrives

There isn't any troll in the title. The "World's Largest microSD" card sized at 200GB is now officially available for purchasing from Amazon and number of retailers. So, Is your 16GB, or 32GB, or even 64GB smartphone not enough to store all your data in one place? Order a Sandisk's new...

6.7AI score
Exploits0
0day.today
0day.today
added 2014/05/15 12:0 a.m.28 views

Photo Organizer CMS - XSS and SQL Vulnerabilities

Photo Organizer is an image gallery CMS vulnerable to XSS & SQL injections 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 0 0 1 /\ \ /\ \ /\ \ 1 0 \ \ /\ \ /\ \ \ /'\ \ \ /\ \ 0 1 \ \ \ \ \ /'\ /\ \ /',/\ /\ \ \ , /'\ \ \ \ \ \ /'\ /' \ 1 0 \ ...

7AI score
Exploits0
exploitpack
exploitpack
added 2012/10/18 12:0 a.m.12 views

Amateur Photographers Image Gallery - force-download.php?File Information Disclosure

Amateur Photographers Image Gallery - force-download.php?File Information Disclosure source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure...

7.2AI score
Exploits0
exploitpack
exploitpack
added 2012/10/18 12:0 a.m.11 views

Amateur Photographers Image Gallery - plist.php?albumid SQL Injection

Amateur Photographers Image Gallery - plist.php?albumid SQL Injection source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability...

0.3AI score
Exploits0
Fedora
Fedora
added 2011/04/21 10:30 p.m.19 views

[SECURITY] Fedora 14 Update: darktable-0.8-7.fc14.1

Darktable is a virtual light-table and darkroom for photographers: it manages your digital negatives in a database and lets you view them through a zoom-able light-table. It also enables you to develop raw images and enhance them...

4.3CVSS3.1AI score0.01407EPSS
Exploits2
Rows per page
Query Builder