Wasiliy Strecker / Contestgallery Developer vulnerabilities
15 vulnerabilities
Known vulnerabilities in Wasiliy Strecker / Contestgallery Developer products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Contest Gallery14 vulnerabilities
- Contest Gallery Pro1 vulnerabilities
CVE-2025-62950wasiliy strecker / contestgallery developercontest gallery+1
EPSS score0.12%
Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Cross Site Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.0.0.CVE-2025-48291wasiliy strecker / contestgallery developercontest gallery+1EPSS score0.28%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through <= 26.0.6.CVE-2025-22693contest-gallerycontest_gallery+2EPSS score0.56%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows SQL Injection.This issue affects Contest Gallery: from n/a through <= 25.1.0.CVE-2024-39631contest-gallerycontest_gallery+2EPSS score0.31%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 23.1.2.CVE-2024-43283contest-gallerycontest_gallery+2EPSS score1.09%
Insertion of Sensitive Information Into Sent Data vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 23.1.2.CVE-2024-56237contest-gallerycontest_gallery+2EPSS score0.34%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through <= 24.0.3.CVE-2024-32778contest-gallerycontest_gallery+2EPSS score0.61%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4.CVE-2024-30236contest-gallerycontest_gallery+2EPSS score0.63%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4.CVE-2024-30428contest-gallerycontest_gallery+2EPSS score0.43%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Reflected XSS.This issue affects Contest Gallery: from n/a through <= 24.0.3.CVE-2024-30238contest-gallerycontest_gallery+2EPSS score0.63%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.2.CVE-2026-65447wasiliy strecker / contestgallery developercontest gallery+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.CVE-2026-42680wasiliy strecker / contestgallery developercontest gallery pro+1EPSS score0.48%
Incorrect Privilege Assignment vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery Pro allows Privilege Escalation.
This issue affects Contest Gallery Pro: from n/a through 29.0.1.CVE-2026-25035wasiliy strecker / contestgallery developercontest gallery+1EPSS score0.42%
Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2.CVE-2026-24964wasiliy strecker / contestgallery developercontest gallery+1EPSS score0.16%
Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.1.2.1.CVE-2026-24965wasiliy strecker / contestgallery developercontest gallery+1EPSS score0.23%
Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contest Gallery: from n/a through <= 28.1.1.