Photospace Gallery

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-3991 Nov 29, 21:15 MEDIUM POC This Month

The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters saved via the update() function in versions up to, and including, 2.3.5 due to. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Photospace Gallery Wordpress Plugin

NVD VulDB

CVSS 3.1

6.4

EPSS

0.1%

CVE-2022-38135 Sep 12, 21:15 MEDIUM This Month

Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Privilege Escalation Photospace Gallery Wordpress Plugin

NVD

CVSS 3.1

4.3

EPSS

0.5%

CVE-2022-3991

EPSS 0% CVSS 6.4

MEDIUM POC This Month

WordPress XSS Photospace Gallery +1

NVD VulDB

CVE-2022-38135

EPSS 1% CVSS 4.3

MEDIUM This Month

WordPress Privilege Escalation Photospace Gallery +1

NVD