Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
WpchillModula Image Gallery*

3 matches found

CVE
CVE•added 2020/02/20 9:52 p.m.•119 views

CVE-2020-9003

Summary of CVE-2020-9003 (Modula Image Gallery, WordPress) : A stored XSS vulnerability affects the WordPress Modula Image Gallery plugin, specifically versions before 2.2.5. An authenticated, low-privileged user can inject arbitrary JavaScript code that is then viewed by other users, enabling cl...

5.4CVSS5.2AI score0.01042EPSS
CVE
CVE•added 2025/01/08 9:18 a.m.•59 views

CVE-2024-12853

CVE-2024-12853 concerns Modula Image Gallery for WordPress. The Wordfence document confirms an authenticated Arbitrary File Upload vulnerability in the Modula Image Gallery plugin (versions up to and including 2.11.10) enabling Author+ level attackers to upload arbitrary files on the server, with...

8.8CVSS8.9AI score0.00863EPSS
CVE
CVE•added 2025/04/03 12:22 p.m.•54 views

CVE-2024-9416

The CVE-2024-9416 entry maps to Modula Image Gallery (WordPress) and is a Stored DOM-based Cross-Site Scripting vulnerability via the plugin’s bundled FancyBox JavaScript library (versions up to 5.x). Root cause: insufficient input sanitization and output escaping on user-supplied attributes, ena...

6.4CVSS5.9AI score0.0021EPSS