Photos And Files Contest Gallery
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:photos_and_files_contest_gallery:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Photos And Files Contest Gallery (2bc115ac-d021-5d9a-b425-9e0f627979c4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-1487 |
vulnerable | 2026-06-08 06:25:40.204489 |
Photos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site Scripting
The Photos and Files Contest Gallery WordPress plugin before 21.3.1 does not sanitize and escape some parameters, which could allow users with a role as low as author to perform Cross-Site Scripting attacks.
Published: 2024-03-11T17:56:07.447Z
Updated: 2025-03-28T23:22:28.039Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5307 |
vulnerable | 2026-06-08 06:19:43.133240 |
Photos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP Headers
The Photos and Files Contest Gallery WordPress plugin before 21.2.8.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks via certain headers.
Published: 2023-10-31T13:54:43.166Z
Updated: 2025-04-22T20:03:31.145Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.