Known vulnerabilities in Picture Gallery - Frontend Image Uploads, AJAX Photo List
Vendor:
VideoWhisper.com
Software CPE:
cpe:2.3:a:videowhisper:picture-gallery:*:*:*:*:*:wordpress:*:*
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
5.3
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-12696 |
CWE-79 | Low | 1.5.23 | 21.03.2025 |
SB2025032134 |
||
| #VU103484 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-13584 |
CWE-79 | Low | 1.5.20 | 31.01.2025 |
SB2025013137 |