RCE in Remyandrade Modern_image_gallery_app
CVE-2026-3070
A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.001 (17.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.
Affected products
- Remyandrade Modern_image_gallery_app — versions 1.0
- Sourcecodester Modern Image Gallery App — versions 1.0
Weakness classification (CWE)
References
- VDB-347425 | SourceCodester Modern Image Gallery App upload.php cross site scripting (technical-description, Third Party Advisory, VDB Entry, vdb-entry)
- VDB-347425 | CTI Indicators (IOB, IOC, TTP, IOA) (signature, Permissions Required, permissions-required, VDB Entry)
- Submit #757768 | SourceCodester Modern Image Gallery App V1 Cross Site Scripting (Third Party Advisory, VDB Entry, third-party-advisory)
- cna@vuldb.com (issue-tracking, Exploit, Third Party Advisory, exploit, Mitigation, Issue Tracking)
- cna@vuldb.com (Product, product)
Frequently asked questions
- What is CVE-2026-3070?
- CVE-2026-3070 is a medium-severity vulnerability in Remyandrade Modern_image_gallery_app, classified under Cross-site Scripting. CVSS score: 4.3/10. Published 2026-02-24.
- How severe is CVE-2026-3070?
- Medium severity. CVSS v3 base score is 4.3 out of 10.