Contest Gallery Security Vulnerabilities and Issues — Contest Gallery CVE List

Lucene search

Contest GalleryContest Gallery

12 matches found

CVE•added 2024/06/09 1:15 p.m.•75 views

CVE-2024-32778

Missing Authorization vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.4.

8.5CVSS8.5AI score0.00161EPSS

CVE•added 2024/03/28 5:15 a.m.•62 views

CVE-2024-30236

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.4.

9.9CVSS8.9AI score0.00498EPSS

CVE•added 2024/11/28 10:15 a.m.•56 views

CVE-2024-11103

The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 24.0.7. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attacker...

9.8CVSS9.7AI score0.00218EPSS

CVE•added 2024/03/29 2:15 p.m.•56 views

CVE-2024-30428

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Contest Gallery allows Reflected XSS.This issue affects Contest Gallery: from n/a through 21.3.5.

7.1CVSS7.1AI score0.00196EPSS

CVE•added 2021/11/29 9:15 a.m.•54 views

CVE-2021-24915

The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks...

9.8CVSS9.7AI score0.74556EPSS

Web

CVE•added 2024/03/27 2:15 p.m.•54 views

CVE-2024-30238

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 21.3.2.

8.8CVSS8.9AI score0.00498EPSS

CVE•added 2024/08/01 11:15 p.m.•52 views

CVE-2024-39631

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Contest Gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through 23.1.2.

7.1CVSS6.9AI score0.00127EPSS

CVE•added 2025/02/03 3:15 p.m.•49 views

CVE-2025-22693

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contest Gallery Contest Gallery allows SQL Injection. This issue affects Contest Gallery: from n/a through 25.1.0.

7.6CVSS7.9AI score0.00056EPSS

CVE•added 2022/12/06 9:15 p.m.•45 views

CVE-2022-45848

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Contest Gallery plugin

6.1CVSS5.8AI score0.00216EPSS

CVE•added 2024/08/26 4:15 p.m.•41 views

CVE-2024-43283

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Contest Gallery.This issue affects Contest Gallery: from n/a through 23.1.2.

7.5CVSS5.3AI score0.00333EPSS

CVE•added 2025/01/02 12:15 p.m.•38 views

CVE-2024-56237

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Contest Gallery Contest Gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through 24.0.3.

5.9CVSS5.8AI score0.00035EPSS

CVE•added 2023/06/22 12:15 p.m.•27 views

CVE-2023-28784

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contest Gallery plugin

7.1CVSS6AI score0.00087EPSS