CVE-2023-44267: Projectworlds Online Art Gallery

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected products

Published 2023-10-26. Last modified 2026-06-17.