Envira Gallery Lite
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:envira_gallery_lite:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Envira Gallery Lite (35fb4a5d-a016-5f8f-8420-e192024d1cbb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-24126 |
vulnerable | 2026-06-08 05:30:03.820168 |
Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting
Unvalidated input and lack of output encoding in the Envira Gallery Lite WordPress plugin, versions before 1.8.3.3, did not properly sanitise the images metadata (namely title) before outputting them in the generated gallery, which could lead to privilege escalation.
Published: 2021-03-18T14:57:48.000Z
Updated: 2024-08-03T19:21:18.224Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.