agentprime: contest-gallery-contest-gallery-upload-vote-photos-media-sell-with-paypal-stripeEvery new CVE for contest-gallery-contest-gallery-upload-vote-photos-media-sell-with-paypal-stripe.https://agentprime.io/CVE-2026-78088: Contest Gallery <= 32.0.1 - Unauthenticated Arbitrary File Upload via 'baseUrlForFacebook' Parameterhttps://agentprime.io/advisories/CVE-2026-78088/https://agentprime.io/advisories/CVE-2026-78088/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 03:28:19 GMTCVECVE-2026-16586: Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'https://agentprime.io/advisories/CVE-2026-16586/https://agentprime.io/advisories/CVE-2026-16586/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Aug 2026 03:25:57 GMTCVECVE-2026-12165: Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameterhttps://agentprime.io/advisories/CVE-2026-12165/https://agentprime.io/advisories/CVE-2026-12165/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Jun 2026 09:30:59 GMTCVECVE-2026-8912: Contest Gallery <= 28.1.6 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2026-8912/https://agentprime.io/advisories/CVE-2026-8912/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 May 2026 11:18:46 GMTCVECVE-2026-4021: Contest Gallery <= 28.1.5 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusionhttps://agentprime.io/advisories/CVE-2026-4021/https://agentprime.io/advisories/CVE-2026-4021/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Mar 2026 23:25:50 GMTCVECVE-2026-3180: Contest Gallery <= 28.1.4 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2026-3180/https://agentprime.io/advisories/CVE-2026-3180/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 17:23:36 GMTCVECVE-2025-12849: Contest Gallery <= 28.0.2 - Missing Authorizationhttps://agentprime.io/advisories/CVE-2025-12849/https://agentprime.io/advisories/CVE-2025-12849/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Nov 2025 06:41:31 GMTCVECVE-2025-11254: Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.3 - Unauthenticated CSV Injectionhttps://agentprime.io/advisories/CVE-2025-11254/https://agentprime.io/advisories/CVE-2025-11254/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 11 Oct 2025 08:29:16 GMTCVECVE-2025-10383: Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-10383/https://agentprime.io/advisories/CVE-2025-10383/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 04 Oct 2025 03:33:31 GMTCVECVE-2025-7725: Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI <= 26.1.0 - Unauthenticated Stored Cross-Site Scr…https://agentprime.io/advisories/CVE-2025-7725/https://agentprime.io/advisories/CVE-2025-7725/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 Aug 2025 04:24:28 GMTCVECVE-2025-6716: Contest Gallery <= 26.0.8 - Authenticated (Author+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-6716/https://agentprime.io/advisories/CVE-2025-6716/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Jul 2025 06:43:33 GMTCVECVE-2025-3862: Contest Gallery <= 26.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameterhttps://agentprime.io/advisories/CVE-2025-3862/https://agentprime.io/advisories/CVE-2025-3862/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 May 2025 11:13:44 GMTCVECVE-2025-1513: Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 26.0.0.1 - Unauthenticated Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-1513/https://agentprime.io/advisories/CVE-2025-1513/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Feb 2025 05:23:15 GMTCVECVE-2024-11103: Contest Gallery <= 24.0.7 - Unauthenticated Arbitrary Password Reset to Privilege Escalation/Account Takeoverhttps://agentprime.io/advisories/CVE-2024-11103/https://agentprime.io/advisories/CVE-2024-11103/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Nov 2024 09:47:09 GMTCVEcriticalCVE-2024-10687: Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons <= 24.0.3 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-10687/https://agentprime.io/advisories/CVE-2024-10687/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Nov 2024 09:30:59 GMTCVEcritical