Image Sharing Script Project Image Sharing Script — known CVE vulnerabilities

Every CVE whose affected-product data names Image Sharing Script Project Image Sharing Script, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-7431 — CVSS 6.5 (medium): PHP Scripts Mall Image Sharing Script 1.3.4 has directory traversal via a direct request for a listing of an uploads directory.
• CVE-2018-6902 — CVSS 5.4 (medium): PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the Full Name field in an Edit Profile action.
• CVE-2019-7430 — CVSS 5.3 (medium): PHP Scripts Mall Image Sharing Script 1.3.4 has HTML injection via the Search Bar.