Unknown Gallery Plugin For Wordpress – Envira Photo Gallery vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Gallery Plugin For Wordpress – Envira Photo Gallery, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1MediumCVE-2022-2190enviragallery · envira_gallery +2 moreEnvira Gallery Lite < 1.8.4.7 - Reflected Cross-Site ScriptingThe Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsersEPSS0.65%