CVE-2026-3070 - Vulnerability Analysis

Overview

SourceCodester Modern Image Gallery App 1.0 contains a stored XSS caused by manipulation of the "filename" argument in upload.php, letting remote attackers execute scripts, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary scripts, potentially leading to session hijacking or user impersonation.

Mitigation

Update to the latest version or apply patches that sanitize the filename input.

References

• https://github.com/tiancesec/CVE/issues/28
• https://vuldb.com/?ctiid.347425
• https://vuldb.com/?id.347425
• https://vuldb.com/?submit.757768
• https://www.sourcecodester.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner