Description
The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues via the bwg_album_breadcrumb_0 and shortcode_id GET parameters passed to the bwg_frontend_data AJAX action
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 1.5.68 – < 1.5.68 | 1.5.68 |