Photo Gallery by 10Web – Mobile-Friendly Image Gallery, e044228379148cc090c0dcb3f53c4be347b152b2
- CVE, Research URL
- Published on
- Mar 21, 2023
- Research Description
- Photo Gallery by 10Web – Mobile-Friendly Image Gallery [photo-gallery] < 1.8.15 Photo Gallery by 10Web <= 1.8.14 - Authenticated (Administrator+) Directory Traversal The Photo Gallery plugin by 10Web for WordPress is vulnerable to Directory Traversal in versions up to, and including, 1.8.14 via the dir parameter. This allows authenticated attackers with administrator-level permissions to upload files to arbitrary directories on the server.
- Affected versions
-
max 1.8.15.
- Status
-
vulnerable