Wasiliy Strecker / ContestGallery developer vulnerabilities

We track 8 vulnerabilities in Wasiliy Strecker / ContestGallery developer products across 2 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on June 1, 2026.

8vulnerabilities

3critical

5high

0exploited

8.5average CVSS score

Latest Wasiliy Strecker / ContestGallery developer vulnerabilities

9.8 Critical severity
Contest Gallery Pro: Incorrect Privilege Assignment
CVE-2026-42680Jun 1, 2026Wasiliy Strecker / ContestGallery developer
Incorrect Privilege Assignment vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery Pro allows Privilege Escalation. This issue affects Contest Gallery Pro: from n/a through 29.0.1.
9.8 Critical severity
Contest Gallery: Authentication Bypass Using an Alternate Path or Channel
CVE-2026-25035Mar 25, 2026Wasiliy Strecker / ContestGallery developer
Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2.
7.1 High severity
Contest Gallery: Improper Neutralization of Input During Web Page Generation
CVE-2025-48291Jul 16, 2025Wasiliy Strecker / ContestGallery developer
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Stored XSS.This issue affects Contest Gallery: from n/a through <= 26.0.6.
7.2 High severity
Contest Gallery: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-22693Feb 3, 2025Wasiliy Strecker / ContestGallery developer
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows SQL Injection.This issue affects Contest Gallery: from n/a through <= 25.1.
7.5 High severity
Contest Gallery: Insertion of Sensitive Information Into Sent Data
CVE-2024-43283Aug 26, 2024Wasiliy Strecker / ContestGallery developerEPSS 1.09%
Insertion of Sensitive Information Into Sent Data vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 23.1.2.
8.1 High severity
Contest Gallery: Improper Limitation of a Pathname to a Restricted Directory
CVE-2024-32778Jun 9, 2024Wasiliy Strecker / ContestGallery developer
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4.
9.9 Critical severity
Contest Gallery: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-30236Mar 28, 2024Wasiliy Strecker / ContestGallery developer
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.4.
8.8 High severity
Contest Gallery: Improper Neutralization of Special Elements used in an SQL Command
CVE-2024-30238Mar 27, 2024Wasiliy Strecker / ContestGallery developer
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through <= 21.3.2.