reflex_gallery_project - MidnightBSD Security Advisories

Advisories for reflex_gallery_project

CVE-2013-7482 MEDIUM

The reflex-gallery plugin before 1.4.3 for WordPress has XSS.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
reflex_gallery_project	reflex_gallery	*

CVE-2015-4133 HIGH

Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in uploads/ directory.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor	Product	Version
reflex_gallery_project	reflex_gallery	*