File Gallery

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-48771 Dec 14, 17:15 HIGH This Week

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno "Aesqe" Babic File Gallery allows Reflected XSS.8.5.4. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS File Gallery

NVD

CVSS 3.1

7.1

EPSS

0.2%

CVE-2023-23676 May 16, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS File Gallery

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2014-2558 May 06, 14:55 MEDIUM POC PATCH This Month

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP WordPress RCE Code Injection Wordpress Plugin +1

NVD

CVSS 2.0

6.5

EPSS

0.5%

CVE-2023-48771

EPSS 0% CVSS 7.1

HIGH This Week

XSS File Gallery

NVD

CVE-2023-23676

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS File Gallery

NVD

CVE-2014-2558

EPSS 0% CVSS 6.5

MEDIUM POC PATCH This Month

PHP WordPress RCE +3

NVD