Vulnerabilities > CVE-2024-37442 - Unspecified vulnerability in Ays-Pro Photo Gallery

047910
CVSS 5.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
LOW
network
low complexity
ays-pro
NVD
Published: 2024-07-09
Updated: 2024-11-21

Summary

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1.

Vulnerable Configurations

Part Description Count
Application
Ays-Pro
235

References