cleantalk
Vulnerabilities and Security Researches

Photo Gallery by 10Web – Mobile-Friendly Image Gallery, 6e5f0e04-36c0-4fb6-8194-fe32c15cb3b5

Published on
-
Research Description
Photo Gallery by 10Web &#8211; Mobile-Friendly Image Gallery [photo-gallery] < 1.5.69 Photo Gallery by 10web &lt; 1.5.69 - Reflected Cross-Site Scripting (XSS) The plugin did not properly sanitise the bwg_search_X GET parameter, available in a frontend gallery when the Show Search Box setting is enabled (disabled by default), leading to a reflected Cross-Site Scripting issue
Affected versions
max 1.5.69.
Status
vulnerable