CVE-2022-1394 | BDVDB-2026-177443 Detail

Photo Gallery by 10Web – Mobile-Friendly Image Gallery

Description#

The Photo Gallery by 10Web WordPress plugin before 1.6.4 does not properly validate and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/f7a0df37-3204-4926-84ec-2204a2f22de3

Exploit#

No public exploit known

History#

Version 12022-06-06Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.