CVE-2020-35582

概要

参考情報

• packetstormsecurity.com/files/160924/Envira-Gallery-Lite-1.8.3.2-Cross-Site-Scripting.html · Exploit
• enviragallery/envira-gallery-lite · Release Notes
• enviragallery/envira-gallery-lite commit 1026515 · Patch
• enviragallery/envira-gallery-lite commit 3b081dd · Patch

envira gallery のその他の脆弱性

• CVE-2024-43925高 8.8Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Secu…
• CVE-2024-3899中 4.8The Gallery Plugin for WordPress WordPress plugin before 1.8.15 does not sanitise and escape some of its image settings, which could allow …
• CVE-2023-6742中 4.3The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to an im…
• CVE-2022-2190中 6.1The Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an…
• CVE-2021-24126中 5.4Unvalidated input and lack of output encoding in the Envira Gallery Lite WordPress plugin, versions before 1.8.3.3, did not properly sanitis…