CVE-2012-20002 | James Charlesworth TinyMCE Thumbnail Gallery Plugin up to 1.0.x /php/download-image.php href path traversal

October 20, 2026 Yanac

A vulnerability, which was classified as problematic, was found in James Charlesworth TinyMCE Thumbnail Gallery Plugin up to 1.0.x. The impacted element is an unknown function of the file /php/download-image.php. The manipulation of the argument href results in path traversal.

This vulnerability is reported as CVE-2012-20002. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More