Unknown Photos And Files Contest Gallery vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Photos And Files Contest Gallery, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2024-1487contest-gallerycontest_gallery+2
EPSS score
0.40%
The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks.6.1CVE-2023-5307contest-gallerycontest_gallery+2
EPSS score
0.50%
The Photos and Files Contest Gallery WordPress plugin before 21.2.8.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks via certain headers.