CVE-2022-1282 | BDVDB-2026-175083 Detail

Photo Gallery by 10Web – Mobile-Friendly Image Gallery

Description#

The Photo Gallery by 10Web WordPress plugin before 1.6.3 does not properly sanitize the $_GET['image_url'] variable, which is reflected back to the users when executing the editimage_bwg AJAX action.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/37a58f4e-d2bc-4825-8e1b-4aaf0a1cf1b6
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2706798%40photo-gallery&old=2694928%40photo-gallery&sfp_email=&sfph_mail=

Exploit#

No public exploit known

History#

Version 12022-05-02Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.