skyphe vulnerabilities

Products

• file gallery 1
• file-gallery 1

Latest skyphe CVEs

Newest publication first

1. CVE-2023-48771 WordPress File Gallery Plugin <= 1.8.5.4 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-12-14

   Medium·CVSS 6.1 EPSS 0.41%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno "Aesqe" Babic File Gallery allows Reflected XSS.This issue affects File Gallery: from n/a through 1.8.5.4.

2. CVE-2014-2558 File Gallery < 1.7.9.2 - Remote Code Execution

   Published 2014-05-06

   Medium·CVSS 6.5 EPSS 1.7%

   The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a ' (backslash quote) in the setting fields to /wp-admin/options-media.php, related to the create_function function.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.