Maxgalleria Security Vulnerabilities and Issues — Maxgalleria CVE List

Lucene search

MaxfoundryMaxgalleria

3 matches found

CVE•added 2022/03/18 6:15 p.m.•76 views

CVE-2022-25603

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria WordPress plugin (versions 6.2.5).

4.8CVSS4.8AI score0.00319EPSS

CVE•added 2024/05/02 5:15 p.m.•48 views

CVE-2024-3581

The MaxGalleria plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the add_media_library_images_to_gallery function in all versions up to, and including, 6.4.2. This makes it possible for authenticated attackers, with subscriber access or above, to ...

4.3CVSS6.5AI score0.00285EPSS

CVE•added 2024/06/18 10:15 p.m.•39 views

CVE-2024-5970

The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallery_thumb shortcode in all versions up to, and including, 6.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated ...

6.4CVSS5.9AI score0.00102EPSS