PatchTheCVEphotospace gallery project vulnerabilities
Recent CVEs affecting photospace gallery project products. 2 tracked.
photospace gallery project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-11-29. Highest priority: CVE-2022-3991 (score 40/100).
- CVE-2022-3991 MEDIUM 6.4 UPGRADE The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings para
- CVE-2022-38135 MEDIUM 5.4 UPGRADE Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows us
FAQ
How do I fix photospace gallery project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is photospace gallery project being exploited right now?
None of the tracked photospace gallery project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which photospace gallery project CVE should I patch first?
CVE-2022-3991 currently ranks highest (40/100): The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings para.