File Gallery

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-48771 HIGH This Week

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno "Aesqe" Babic File Gallery allows Reflected XSS.8.5.4. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS File Gallery

NVD

CVSS 3.1

7.1

EPSS

0.2%

CVE-2023-23676 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS File Gallery

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2014-2558 MEDIUM POC PATCH This Month

The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE WordPress PHP Code Injection File Gallery

NVD

CVSS 2.0

6.5

EPSS

0.5%

CVE-2023-48771

EPSS 0% CVSS 7.1

HIGH This Week

XSS File Gallery

NVD

CVE-2023-23676

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS File Gallery

NVD

CVE-2014-2558

EPSS 0% CVSS 6.5

MEDIUM POC PATCH This Month

RCE WordPress PHP +2

NVD