Grand Flagallery

grand_flagallery

Vendor: Codeasily • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-24903 1Codeasily 1Grand Flagallery Jun 17, 2026 Feb 28, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when the unfiltered_html...Show more The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when the unfiltered_html capability is disallowed.Show less
CVE-2014-8491 1Codeasily 1Grand Flagallery May 13, 2026 Oct 18, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the installation path via a request to (1) flagallery-skins/banner_widget_default/gallery.php or (2) flash-album-gallery/skins/banne...Show more The Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the installation path via a request to (1) flagallery-skins/banner_widget_default/gallery.php or (2) flash-album-gallery/skins/banner_widget_default/gallery.php.Show less
CVE-2011-4624 1Codeasily 1Grand Flagallery May 6, 2026 Oct 1, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.