2 matches found
PT-2026-134506
Name of the Vulnerable Software and Affected Versions NextGEN Gallery versions prior to 4.4.2 Description Remote Code Execution is possible for authenticated attackers with custom-level access and above. The issue occurs via the render image function due to unrestricted mass assignment of...
8.8CVSS5.9AI score0.00772EPSS
SaveExploits0References11
SUSE CVE-2024-55601
Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.139.4, some HTML attributes in Markdown in the internal templates listed below not escaped in internal render hooks. Those whoa re impacted are Hugo users who do not trust their Markdown content files and are usin...
5.3CVSS5.7AI score0.00599EPSS
SaveExploits0References4
20