PatchTheCVEtinywebgallery vulnerabilities and fixes
Recent CVEs affecting tinywebgallery, with upgrade or downgrade steps. 2 tracked.
tinywebgallery has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-12-18. Highest priority: CVE-2023-53922 (score 64/100).
- CVE-2023-53939 MEDIUM 5.4 DOWNGRADE TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated attackers t
- CVE-2023-53922 CRITICAL 9.8 DOWNGRADE TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allo
FAQ
How do I fix tinywebgallery vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tinywebgallery being exploited right now?
None of the tracked tinywebgallery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tinywebgallery CVE should I patch first?
CVE-2023-53922 currently ranks highest (64/100): TinyWebGallery v2.5 contains a remote code execution vulnerability in the admin upload functionality that allo.