VYPR

Gallery

by Modx

CVEs (1)

  • CVE-2019-1010123HigJul 23, 2019
    risk 0.49cvss 7.5epss 0.01

    MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web…