Vulnerabilities

Summary — last 7 days

New vulnerabilities2,741▼ 480 vs. last week
Critical / high1,306▼ 184 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)226▼ 276 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedMedium (5.4)0.49%—Gallerycms Project Gallerycms4/25/20226/17/2026
A stored cross-site scripting (XSS) vulnerability in /index.php/album/add of GalleryCMS v2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the album_name parameter.
Orbitaley — Vulnerabilities