Filtered by vendor Pluginus
Subscriptions
Filtered by product Inpost Gallery
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-28666 | 1 Pluginus | 1 Inpost Gallery | 2024-11-21 | 5.4 Medium |
| The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the add_inpost_gallery_slide_item action, which can only be triggered by an authenticated user. | ||||
| CVE-2022-4063 | 1 Pluginus | 1 Inpost Gallery | 2024-11-21 | 9.8 Critical |
| The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers. | ||||
Page 1 of 1.