Description
The Photo Gallery by 10Web WordPress plugin before 1.8.49 does not escape a shortcode attribute that sets a gallery watermark image before rendering it into an HTML image attribute, and decodes percent-encoded characters in the value, allowing users with Contributor-level access and above to perform Stored Cross-Site Scripting that executes in the browser of any user, including an administrator, who views the published gallery.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Photo Gallery by 10Web | < 1.8.49 | 1.8.49 |
References
- https://wpscan.com/vulnerability/6bf17a5c-21c4-4e0e-b0a4-aee18c9820f1/ exploit vdb-entry technical-description