Skip to content
OpenAdvisories

Product · Max Foundry

MaxGalleria

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-5970

    MaxGalleria <= 6.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via maxgallery_thumb Shortcode

    The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallery_thumb shortcode in all versions up to, and including, 6.4.4 due to insufficient input sanitization and output escaping on user supplied attributes. T…

    Max Foundry MaxGalleria Web / CMS
  • Medium 4.3
    CVE-2024-3581

    MaxGalleria <= 6.4.2 - Missing Authorization

    The MaxGalleria plugin for WordPress is vulnerable to unauthorized image upload due to a missing capability check on the add_media_library_images_to_gallery function in all versions up to, and including, 6.4.2. This makes it possible for authenticated attacke…

    Max Foundry MaxGalleria Web / CMS