Skip to contentContest-gallery Contest Gallery – Upload & Vote Photos, Media, Sell With Paypal & Stripe vulnerabilities
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' ParameterCVE-2026-780888.8 High
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'CVE-2026-165866.5 Medium
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' ParameterCVE-2026-121658.8 High
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery <= 28.1.6 - Unauthenticated SQL InjectionCVE-2026-89127.5 High
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery <= 28.1.5 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type ConfusionCVE-2026-40218.1 High
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery <= 28.1.4 - Unauthenticated SQL InjectionCVE-2026-3180Public exploit7.5 High
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery <= 28.0.2 - Missing AuthorizationCVE-2025-128495.3 Medium
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV InjectionCVE-2025-112544.3 Medium
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2025-103836.4 Medium
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripePhotos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI <= 26.1.0 - Unauthenticated Stored Cross-Site Scri…CVE-2025-77257.2 High
- contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripeContest Gallery <= 26.0.8 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2025-67166.4 Medium
- contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 moreContest Gallery <= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id ParameterCVE-2025-38626.4 Medium
- contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 morePhotos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 26.0.0.1 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-15137.2 High
- contest-gallery contest gallery, contest gallery gallery, contest-gallery contest gallery – upload & vote photos, media, sell with paypal & stripe +2 moreContest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account TakeoverCVE-2024-111039.8 Critical
- contest-gallery contest gallery, contest gallery – upload & vote photos, media, sell with paypal & stripe +1 morePhotos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL InjectionCVE-2024-106879.8 Critical