CVE-2023-27620

CVE-2023-27620: Stored XSS in RoboSoft Photo Gallery, Images, Slider (Rbs Image Gallery) plugin for WordPress prior to version 3.2.13. Root cause: shortcodes-based input handling allows injection. Affected: Robo Gallery plugin

CVE-2024-3896

CVE-2024-3896 affects the WordPress plugin Robo Gallery (Photo Gallery, Images, Slider in Rbs Image Gallery) , with versions up to and including 3.2.19 . The issue is a Stored Cross-Site Scripting (XSS) via the Gallery Title field due to insufficient input sanitization and output escaping. Exploi...

CVE-2022-45804

The CVE-2022-45804 entry concerns the Robo Gallery (Rbs Image Gallery) WordPress plugin, version

CVE-2023-3499

The CVE affects Robo Gallery (Rbs Image Gallery WordPress plugin) versions prior to 3.2.16. Root cause: some settings are not sanitized/escaped, enabling a stored XSS via admin actions even when unfiltered_html is disallowed ( multisite included). Impact: high-privilege users (e.g., admins) could...

CVE-2024-22295

CVE-2024-22295 is a Stored XSS vulnerability in RoboGallery (RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery) affecting versions up to 3.2.17. Root cause is improper input neutralization during web page generation. The fix is version 3.2.18 and later. Patchstack describes a low-severi...