← All advisories

Medium severity6.1NVD Advisory· Published Apr 9, 2019· Updated Jun 17, 2026

CVE-2019-6117

CVE-2019-6117

Description

The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function.

Affected products

3

WordPress/Wpape Ape Galleryinferred2 versions
<=1.6.14+ 1 more
- (no CPE)range: <=1.6.14
- (no CPE)range: =1.6.14
Package: https://wordpress.org/plugins/wpape-ape-gallery
Wpape/Ape Gallery
cpe:2.3:a:wpape:ape_gallery:1.6.14:*:*:*:*:wordpress:*:*

Patches

Vulnerability mechanics

References

1

earthmanet.github.io/2019/01/05/Wordpress%20plugin%20Gallery%20Images%20Ape%201.6.14-Stored%20Cross-Site%20Scripting/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.