Findings

CVE-2026-3070

A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0.

Published Feb 24, 2026 · updated Jun 17, 2026 · remyandrade modern image gallery app

A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 24, 2026 · NIST NVD

    Detected

    A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.

Affected

  • cpe remyandrade/modern image gallery app1.0

Sources

  • CVE.orgVulnerability recordCVE-2026-3070

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-3070

    A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0. Affected by this vulnerability is an unknown functionality of the file upload.php. The manipulation of the argument filename results in cross site scripting. The attack may be launched remotely. The expl

    nvd.nist.gov

References