Photo Gallery by 10Web – Mobile-Friendly Image Gallery, CVE-2020-9335
- CVE, Research URL
- Published on
- Feb 25, 2020
- Research Description
- Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress. Successful exploitation of this vulnerability would allow a authenticated admin user to inject arbitrary JavaScript code that is viewed by other users.
- Affected versions
-
Min -, max 1.5.46.
- Status
-
vulnerable