CVE-2020-35581: enviragallery envira_gallery Cross-site Scripting

EPSS trend

Probability

1.36%

Chance of exploitation in the next 30 days

Percentile

71%

Versus all other CVEs

30-day change

Increase +0.02 pp

From 1.34% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown

References

4 links

github.com/enviragallery/envira-gallery-lite/commit/3b081dd10a1731f8cd981bebeac0e775fb217acfX Refsource MISCPatchThird Party Advisory
github.com/enviragallery/envira-gallery-lite/commit/102651514e6faca914ec1c7e113def340d8e1e09X Refsource CONFIRMPatchThird Party Advisory
packetstormsecurity.com/files/160924/Envira-Gallery-Lite-1.8.3.2-Cross-Site-Scripting.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
github.com/enviragallery/envira-gallery-lite/blob/master/changelog.txtX Refsource CONFIRMRelease NotesThird Party Advisory

Related vulnerabilities

MediumCVE-2021-24126enviragallery · envira_gallery +2 more5y agoEnvira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site ScriptingUnvalidated input and lack of output encoding in the Envira Gallery Lite WordPress plugin, versions before 1.8.3.3, did not properly sanitise the images metadata (namely title) before outputting them in the generated gallery, which could lead to privilege escalation.EPSS0.66%MediumCVE-2020-9334enviragallery · envira_gallery +1 more6y agoenviragallery envira_galleryA stored XSS vulnerability exists in the Envira Photo Gallery plugin through 1.7.6 for WordPress. Successful exploitation of this vulnerability would allow a authenticated low-privileged user to inject arbitrary JavaScript code that is viewed by other users.EPSS0.78%MediumCVE-2020-35582enviragallery · envira_gallery5y agoenviragallery envira_galleryA stored cross-site scripting (XSS) issue in Envira Gallery Lite before 1.8.3.3 allows remote attackers to inject arbitrary JavaScript/HTML code via a POST /wp-admin/post.php request with the post_title parameter.EPSS1.36%MediumCVE-2022-2190enviragallery · envira_gallery +2 more3y agoEnvira Gallery Lite < 1.8.4.7 - Reflected Cross-Site ScriptingThe Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsersEPSS0.65%HighCVE-2024-43925envira gallery team · envira photo gallery +2 more1y agoWordPress Envira Gallery Lite plugin <= 1.8.14 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n/a through 1.8.14.EPSS0.52%MediumCVE-2024-3899enviragallery · envira_gallery +2 more2y agoEnvira Gallery < 1.8.15 - Author+ Stored XSSThe Gallery Plugin for WordPress WordPress plugin before 1.8.15 does not sanitise and escape some of its image settings, which could allow users with post-writing privilege such as Author to perform Cross-Site Scripting attacks.EPSS0.35%

All vulnerabilities inenvira_gallery

CVE-2020-35581: enviragallery envira_gallery Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References