Photospace Gallery Project Photospace Gallery vulnerabilities
2 vulnerabilities
Known vulnerabilities in Photospace Gallery Project Photospace Gallery, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2022-38135dean oakley · photospace gallery (wordpress plugin) +2 moreWordPress Photospace Gallery plugin <= 2.3.5 - Broken Access Control vulnerabilityBroken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings.EPSS0.65%MediumCVE-2022-3991deanoakley · photospace gallery +2 morePhotospace Gallery <= 2.3.5 - Authenticated (Subscriber+) Stored Cross-Site ScriptingThe Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters saved via the update() function in versions up to, and including, 2.3.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.EPSS0.67%