Catfolders Document Gallery & Pdf Library
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:catfolders_document_gallery_&_pdf_library:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Catfolders Document Gallery & Pdf Library (da070352-fffd-50f0-bc1d-9e66878df336) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-84930 |
vulnerable | 2026-09-16 04:33:10.309110 |
CatFolders Document Gallery < 2.0.7 - Author+ Stored XSS via titleTag Block Attribute
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not properly validate a block attribute before using it as an HTML tag name in its gallery output, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of anyone who views the affected post.
Published: 2026-09-05T06:00:09.771Z
Updated: 2026-09-06T10:35:41.698Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.