Lucene search

K
RobosoftRobo Gallery

7 matches found

CVE
CVE
added 2024/05/06 6:15 p.m.47 views

CVE-2024-34382

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in RoboSoft Robo Gallery.This issue affects Robo Gallery: from n/a through 3.2.18.

5.3CVSS9.3AI score0.00269EPSS
CVE
CVE
added 2025/01/07 6:15 a.m.41 views

CVE-2024-10102

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its Gallery settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks

2.7CVSS5.5AI score0.0003EPSS
CVE
CVE
added 2024/10/24 1:15 p.m.39 views

CVE-2024-49696

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in RoboSoft Robo Gallery allows Stored XSS.This issue affects Robo Gallery: from n/a through 3.2.21.

5.9CVSS5.7AI score0.00053EPSS
CVE
CVE
added 2025/05/15 8:15 p.m.36 views

CVE-2024-13384

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.24 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for ex...

4.8CVSS5.7AI score0.00046EPSS
CVE
CVE
added 2024/12/13 3:15 p.m.34 views

CVE-2022-45841

Missing Authorization vulnerability in RoboSoft Robo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Robo Gallery: from n/a through 3.2.9.

5.4CVSS5.6AI score0.00045EPSS
CVE
CVE
added 2025/05/07 3:16 p.m.33 views

CVE-2025-47521

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robosoft Robo Gallery allows Stored XSS. This issue affects Robo Gallery: from n/a through 5.0.2.

5.9CVSS5.7AI score0.00042EPSS
CVE
CVE
added 2025/05/15 8:15 p.m.20 views

CVE-2024-10144

The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (...

4.8CVSS5.7AI score0.00046EPSS