Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-25041

Photo Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)

Description

The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues via the bwg_album_breadcrumb_0 and shortcode_id GET parameters passed to the bwg_frontend_data AJAX action

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Photo Gallery by 10Web – Mobile-Friendly Image Gallery

  • 1.5.68 to < 1.5.68affected

References