Codeasily Grand Flagallery
3 CVEs affecting Codeasily Grand Flagallery. Latest disclosed: 2022-02-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-8491 | Medium | 5.3 | 2017-10-18 | The Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the installation path via a request to (1) flagallery-skins/banner_widg… |
CVE-2021-24903 | Medium | 4.8 | 2022-02-28 | The GRAND FlaGallery WordPress plugin through 6.1.2 does not sanitise and escape some of its gallery settings, which could allow high privilege users to perfor… |
CVE-2011-4624 | | 2014-10-01 | Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allows remote attackers… |