Photo Gallery by 10Web – Mobile-Friendly Image Gallery, CVE-2022-1281

CVE, Research URL: CVE-2022-1281
Home page URL: Security reports for Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Application: Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Published on: May 02, 2022
Research Description: The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_POST['filter_tag'] parameter, which is appended to an SQL query, making SQL Injection attacks possible.
Affected versions: Min -, max 1.6.3.
Status: vulnerable

Photo Gallery by 10Web &#8211; Mobile-Friendly Image Gallery, CVE-2022-1281