Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Gallery From Files Project Subscribe
Filtered by product Gallery From Files
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24349 1 Gallery From Files Project 1 Gallery From Files 2022-11-08 4.3 MEDIUM 6.1 MEDIUM
This Gallery from files WordPress plugin through 1.6.0 gives the functionality of uploading images to the server. But filenames are not properly sanitized before being output in an error message when they have an invalid extension, leading to a reflected Cross-Site Scripting issue. Due to the lack of CSRF check, the attack could also be performed via such vector.