CVE-2019-5974: Contest-Gallery Contest Gallery

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

• Contest-Gallery Contest Gallery: before 10.4.5 (fixed in 10.4.5)

Published 2019-07-05. Last modified 2026-06-17.