CVE-2025-67538 WordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jegtheme JNews Gallery jnews-gallery allows Stored XSS.This issue affects JNews Gallery: from n/a through 12.0.1...

PT-2022-2944 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions prior to 12.0.1 Description: The issue is related to an out-of-bounds write that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a victim must op...