Enviragallery: >> Envira Gallery >> 1.8.7.2 Security Vulnerabilities
Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n/a through 1.8.14.
CVSS Score
4.3
EPSS Score
0.002
Published
2024-11-01
The Gallery Plugin for WordPress WordPress plugin before 1.8.15 does not sanitise and escape some of its image settings, which could allow users with post-writing privilege such as Author to perform Cross-Site Scripting attacks.
CVSS Score
4.8
EPSS Score
0.001
Published
2024-09-11