← Back

Gallerycms Project

gallerycms_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Gallerycms
gallerycms

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gallerycms Project
1Gallerycms
Jun 17, 2026
Apr 25, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A stored cross-site scripting (XSS) vulnerability in /index.php/album/add of GalleryCMS v2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the album_name parameter.