Skip to content
OpenAdvisories

Vendor

TinyWebGallery

2 known vulnerabilities.

Products

TinyWebGallery 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2023-53939

    TinyWebGallery v2.5 Stored Cross-Site Scripting via Folder Name Parameter

    TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the folder name parameter. Attackers can edit album folder names with script tags to execute arbitrary JavaScript …

    TinyWebGallery TinyWebGallery