Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
CodeasilyGrand Flagallery

3 matches found

CVE
CVE•added 2022/02/28 9:6 a.m.•92 views

CVE-2021-24903

The CVE-2021-24903 entry concerns the WordPress plugin GRAND FlaGallery (≤ 6.1.2). Affected component: gallery settings in the admin UI; root cause: insufficient sanitisation/escaping of certain settings, enabling Cross-Site Scripting (XSS) by high-privilege users even when unfiltered_html is dis...

4.8CVSS4.8AI score0.00588EPSS
CVE
CVE•added 2014/10/01 2:0 p.m.•79 views

CVE-2011-4624

The CVE-2011-4624 entry refers to a Cross-Site Scripting (XSS) flaw in the WordPress GRAND FlAGallery plugin (flash-album-gallery) specifically in facebook.php, exploitable before version 1.57 via the i parameter. Connected documents (e.g., NUCLEI template and OpenVAS entry) corroborate this XSS ...

4.3CVSS6AI score0.07062EPSS
CVE
CVE•added 2017/10/18 2:0 p.m.•42 views

CVE-2014-8491

The CVE-2014-8491 issue affects the Grand Flagallery WordPress plugin prior to version 4.25. Affected component: the plugin’s gallery-related scripts (flagallery-skins/banner_widget_default/gallery.php and flash-album-gallery/skins/banner_widget_default/gallery.php). Root cause: these endpoints c...

5.3CVSS5.3AI score0.01949EPSS