Photo Gallery by 10Web

Authenticated (Contributor+) Stored CrossSite Scripting via Zipped SVG vulnerability <= 1.8.23

6.5

7 June, 2024

Authenticated (Contributor+) Path Traversal via esc_dir Function vulnerability <= 1.8.23

6.8

7 June, 2024

Broken Access Control vulnerability <= 1.8.25

4.3

27 May, 2024

Broken Access Control vulnerability <= 1.8.20

5.3

25 April, 2024

Reflected Cross Site Scripting (XSS) vulnerability <= 1.8.21

7.1

16 April, 2024