Skip to content
OpenAdvisories

Vendor

origincode

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    WordPress Video Gallery – Vimeo and YouTube Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in origincode Video Gallery – Vimeo and YouTube Gallery smart-grid-gallery allows Stored XSS.This issue affects Video Gallery – Vimeo and YouTube Gallery: from …

  • Medium 4.3

    WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery Bypass

    The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the load_images_thumbnail() and edit_gallery() functi…