Skyphe's vulnerability footprint concentrates on its File Gallery product, where the durable signal centers on application-layer code-injection and cross-site-scripting weaknesses rooted in improper input handling and output encoding. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Skyphe over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-48771MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno "Aesqe" Babic File Gallery allows Reflected XSS.This issue affects File | Dec 14, 2023 | 6.1 | 18 | NO | NO |
CVE-2014-2558MEDIUM The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) i | May 6, 2014 | 6.5 | 18 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Skyphe.
Media articles that mention a CVE ID that affects a product developed by Skyphe — matched by CVE ID, not by vendor name.