CVE-2014-8491 Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 4.25 - Sensitive Data Exposure
MediumCVSS 5.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the installation path via a request to (1) flagallery-skins/banner_widget_default/gallery.php or (2) flash-album-gallery/skins/banner_widget_default/gallery.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codeasily grand flagallery | <= 4.24 | No fix listed |
| wordpress flash-album-gallery(WordPress) | < 4.25 | 4.25 |
References
- g0blin.co.uk exploit third-party-advisory
- wpvulndb.com third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org