Description
The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, leading to an Unauthenticated Stored-XSS attack when comments are displayed
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Photo Gallery by 10Web | < 1.8.34 | 1.8.34 |
References
- https://wpscan.com/vulnerability/22be2b44-cd42-4b02-8448-59dd2989dde1/ exploit vdb-entry technical-description