Filtered by vendor Novafacile Subscriptions
Filtered by product Novagallery Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-42028 1 Novafacile 1 Novagallery 2026-05-10 5.3 Medium
novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability has been identified in novaGallery. This allows unauthenticated users to read image files outside the intended gallery root directory. This issue has been patched in version 2.1.1.