Skip to content
OpenAdvisories
Low · 3.8 CVE-2024-37442 EUVD-2024-36667GHSA-2grw-cv7g-wxwm

WordPress Photo Gallery by Ays – Responsive Image Gallery plugin < 5.7.1 - HTML Injection vulnerability

Published Jul 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Photo Gallery Team Photo Gallery by Ays allows Code Injection.This issue affects Photo Gallery by Ays: from n/a before 5.7.1.

Affected products

VendorProductAffectedFixed
Photo Gallery Team Photo Gallery by Ays < 5.7.1 5.7.1

References