Codeasily

codeasily

4 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Grand Flagallery

grand_flagallery

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-0873 1Codeasily 1Gmedia Gallery Jun 17, 2026 May 16, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, which could allow high privilege users such as admin to perfor...Show more The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowedShow less
CVE-2021-24903 1Codeasily 1Grand Flagallery Jun 17, 2026 Feb 28, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when the unfiltered_html...Show more The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perform Cross-Site scripting attacks even when the unfiltered_html capability is disallowed.Show less
CVE-2014-8491 1Codeasily 1Grand Flagallery May 13, 2026 Oct 18, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the installation path via a request to (1) flagallery-skins/banner_widget_default/gallery.php or (2) flash-album-gallery/skins/banne...Show more The Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the installation path via a request to (1) flagallery-skins/banner_widget_default/gallery.php or (2) flash-album-gallery/skins/banner_widget_default/gallery.php.Show less
CVE-2011-4624 1Codeasily 1Grand Flagallery May 6, 2026 Oct 1, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.