Supsystic Photo Gallery vulnerabilities

3 CVEs affecting Supsystic Photo Gallery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-29921, published 2024-03-27.

More from Supsystic.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-10918, published 2019-08-22. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.
• CVE-2021-36891, published 2022-06-15. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows changing the plugin settings.
• CVE-2024-29921, published 2024-03-27. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in supsystic Photo Gallery by Supsystic gallery-by-supsystic.This issue affects Photo Gallery by…