Wasiliy Strecker / Contestgallery Developer Contest Gallery vulnerabilities

6 CVEs affecting Wasiliy Strecker / Contestgallery Developer Contest Gallery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-65447, published 2026-07-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-25035, published 2026-03-25. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects…
CVE-2025-48291, published 2025-07-16. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Stored…
CVE-2026-65447, published 2026-07-27. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Unauthenticated Cross Site Scripting (XSS) in Contest Gallery <= 30.0.6 versions.
CVE-2026-24965, published 2026-02-03. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Missing Authorization vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2026-24964, published 2026-03-25. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This issue affects Contest Gallery:…
CVE-2025-62950, published 2025-11-06. Medium severity, CVSS 4.3. EPSS: 0.1% chance of exploitation in the next 30 days. Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Cross Site Request Forgery.This issue affects Contest Gallery:…